Re: ACI is slowing down searches

[Quanah Gibson-Mount <quanah@stanford.edu>]

--On Wednesday, September 10, 2003 4:51 PM +0200 Dieter Kluenter 
<dieter@dkluenter.de> wrote:

> Hi,
> my test environment on a single host:
> two severs each with 20,000 entries under ou=benchmark subtree
> Authentication by gssapi
>
> OpenLDAP-2.2alpa
> dabase hdb
> entries in the subtree "ou=benchmark,o=kluenter" have fowllowing aci
>
> openLDAPaci:1.3.6.1.4.1.14658.3.1#entry#grant;r,w,s,c;[all]#group#cn=Admi
> nistratoren,o=kluenter
>
> OpenLDAP-2.1.19
> database bdb
>
> entries in the subtree "ou=benchmark,o=avci,c=de" are controlled by
> following acl
> access to dn.subtree="ou=benchmark,o=avci,c=de"
>        by group="cn=Administratoren,o=avci,c=de" write
>
> OpenLDAP-2.2alpha
> search on aci controlled subtree
> time ldapsearch -h marin.avci.de:4899 -b "ou=benchmark,o=kluenter"
> uid=13457 mail
>
> real    0m0.879s
> user    0m0.050s
> sys     0m0.030s
>
> OpenLDAP-2.1.19
> search on acl controlled subtree
> time ldapsearch -h marin.avci.de:389 -b "ou=benchmark,o=avci,c=de"
> uid=13457 mail
>
> real    0m0.164s
> user    0m0.040s
> sys     0m0.030s
>
> The time values are randomly picked from the results of 1,000 searches
> each (2 searches per sec).
> Can anybody confirm the measured results?
>
> -Dieter

Dieter,

I noticed a definite slowdown in search speed using hdb vs. bdb in my 2.2 
alpha testing as well.  I've chatted with Howard about it, and he has some 
ideas on how to increase the lookup speed.  I expect that later 2.2 
releases will have better performance.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html