Sorry i don't understand the way you explain that, it is not clear in my mind.>>> "POISSON Frédéric"<frederic.poisson@admin.gmessaging.net> schrieb am
27.11.2013
um 10:46 in Nachricht <3fd84a3867972521.5295cd90@admin.gmessaging.net>:
> Hello,
>
> I'm testing the dynlist overlay on OpenLDAP 2.4.38 because i have a static
> group of around 10K uniqueMember. I want to have now a equivalent group with
> dynlist.
>
> I have configured my overlay dynlist like this :
> dn: olcOverlay={2}dynlist,olcDatabase={1}bdb,cn=config
> objectClass: olcOverlayConfig
> objectClass: olcDynamicList
> olcOverlay: {2}dynlist
> olcDlAttrSet: {0}groupOfURLs memberURL uniqueMember
>
> And my group is quite like OpenLDAP example in documentation :
>
> dn: cn=GeneralisationDyn,ou=Groups,dc=example,dc=com
> objectClass: top
> objectClass: groupOfURLs
> cn: GeneralisationDyn
> memberURL: ldap:///ou=People,dc=example,dc=com??one?(objectClass=person)
> uniqueMember: uid=user1,ou=People,dc=example,dc=com
> uniqueMember: uid=user2,ou=People,dc=example,dc=com
> [...]
>
> My backend is Berkeley DB and i have tune it in order to have quite fast
> responses on searches, and locally on my server (virtualized with a single
> proc), it take that time to return the entries found by memberURL :
>
> real 0m0.272s
> user 0m0.040s
> sys 0m0.023s
Actually, if you sum sys and user, you get 0.07s. Times 10000 gives 700s. So
the bulk transfer is quite efficient compared to the single transfer.
Also not that the direction of search is different: Once you start from
uniqueMember, and the other time you start from DN (I guess).
Regards,
>
> If i run an ldapsearch to see all uniqueMember of my dynamic group it take
> around 8 to 10 seconds to have the output !
>
> Why a so big difference of response time in a search of entries and a search
> of uniqueMember inside a dynamic group ?
> Is there some tuning for dynlist plugin ?
>
> Notice also that when i search uniqueMember inside my static group with
> quite same number of uniqueMember) i have less than 0.1 seconds of real
time.
>
>
> Thanks,
> Regards,
> --
>
> Frederic Poisson
Frederic Poisson