openldap-bugs

openldap-bugs@openldap.org

1 participants
20961 discussions

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by Mark.Cairney＠ed.ac.uk 08 Aug '13

08 Aug '13

Hi Quanah, I've transferred one of the nodes to back-hdb and the performance appears to broadly match back-bdb. Is there a simple test I can perform to confirm that it is indeed using back-hdb? For completeness here's the result of my timed search: bash-4.1$ time ldapsearch -H ldaps://rowan.authorise.is.ed.ac.uk:636 -b 'ou=staff,ou=law,ou=hss,dc=authorise,dc=ed,dc=ac,dc=uk' -a always "(&(eduniSchoolCode=S26)(eduniCategory=101)(eduniIDStatus=300))" # numResponses: 425 # numEntries: 424 real 0m0.902s user 0m0.054s sys 0m0.025s On 08/08/13 16:45, Quanah Gibson-Mount wrote: > --On August 8, 2013 4:34:32 PM +0100 Mark Cairney > <Mark.Cairney(a)ed.ac.uk> wrote: > > >>> back-bdb or back-hdb? "BDB" is just the storage database for those two >>> backends. >> >> >> back-bdb. > > Thanks. I would note that back-mdb is based on back-hdb, and that can > have significant differences in performance profile for some operations > as compared to back-bdb. If it were possible, I'd be curious to know if > you see the same issue with back-hdb as you do with back-mdb. > > --Quanah > -- /**************************** Mark Cairney ITI UNIX Section Information Services University of Edinburgh Tel: 0131 650 6565 Email: Mark.Cairney(a)ed.ac.uk *******************************/ The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by quanah＠zimbra.com 08 Aug '13

08 Aug '13

--On August 8, 2013 4:34:32 PM +0100 Mark Cairney <Mark.Cairney(a)ed.ac.uk> wrote: >> back-bdb or back-hdb? "BDB" is just the storage database for those two >> backends. > > > back-bdb. Thanks. I would note that back-mdb is based on back-hdb, and that can have significant differences in performance profile for some operations as compared to back-bdb. If it were possible, I'd be curious to know if you see the same issue with back-hdb as you do with back-mdb. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by Mark.Cairney＠ed.ac.uk 08 Aug '13

08 Aug '13

On 08/08/13 16:27, Howard Chu wrote: > > How many aliases? > In that OU 435, in total across the whole database: 29179. -- /**************************** Mark Cairney ITI UNIX Section Information Services University of Edinburgh Tel: 0131 650 6565 Email: Mark.Cairney(a)ed.ac.uk *******************************/ The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by Mark.Cairney＠ed.ac.uk 08 Aug '13

08 Aug '13

On 08/08/13 16:32, Quanah Gibson-Mount wrote: > > > --On August 8, 2013 3:02:51 PM +0000 Mark.Cairney(a)ed.ac.uk wrote: > >> Full_Name: Mark Cairney >> Version: 2.4.35-RE24 >> OS: SL 6.4 64-bit >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (129.215.200.23) >> >> >> Having migrated the database of our production service running 2.4.35 >> from BDB to MDB alias de-referencing stopped working completely (this has >> already been reported in ITS# 7557). > > back-bdb or back-hdb? "BDB" is just the storage database for those two > backends. back-bdb. > > Thanks, > Quanah > -- /**************************** Mark Cairney ITI UNIX Section Information Services University of Edinburgh Tel: 0131 650 6565 Email: Mark.Cairney(a)ed.ac.uk *******************************/ The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by quanah＠zimbra.com 08 Aug '13

08 Aug '13

--On August 8, 2013 3:02:51 PM +0000 Mark.Cairney(a)ed.ac.uk wrote: > Full_Name: Mark Cairney > Version: 2.4.35-RE24 > OS: SL 6.4 64-bit > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (129.215.200.23) > > > Having migrated the database of our production service running 2.4.35 > from BDB to MDB alias de-referencing stopped working completely (this has > already been reported in ITS# 7557). back-bdb or back-hdb? "BDB" is just the storage database for those two backends. Thanks, Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7657) Alias dereferencing with MDB slow compared with BDB
by hyc＠symas.com 08 Aug '13

08 Aug '13

Mark.Cairney(a)ed.ac.uk wrote: > Full_Name: Mark Cairney > Version: 2.4.35-RE24 > OS: SL 6.4 64-bit > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (129.215.200.23) > > > Having migrated the database of our production service running 2.4.35 from BDB > to MDB alias de-referencing stopped working completely (this has already been > reported in ITS# 7557). > > Upgrading to the RE 24 now has alias derefencing working but it is considerably > slower than BDB was for the same search. > > To confirm this I downgraded one of our nodes (we run 4 nodes in multi-master) > and on that node the search results are once more acceptable: > > With MDB: > time ldapsearch -H ldaps://alder.authorise.is.ed.ac.uk:636 -b > 'ou=staff,ou=law,ou=hss,dc=authorise,dc=ed,dc=ac,dc=uk' -a always > "(&(eduniSchoolCode=S26)(eduniCategory=101)(eduniIDStatus=300))" > > # numResponses: 425 > # numEntries: 424 > > real 0m26.490s > user 0m0.028s > sys 0m0.032s > > > with BDB: > > time ldapsearch -H ldaps://oak.authorise.is.ed.ac.uk:636 -b > 'ou=staff,ou=law,ou=hss,dc=authorise,dc=ed,dc=ac,dc=uk' -a always > "(&(eduniSchoolCode=S26)(eduniCategory=101)(eduniIDStatus=300))" > > real 0m2.605s > user 0m0.054s > sys 0m0.006s > > If there's anything additional I can supply (log files, strace output) let me > know. > > Our OpenLDAP DB currently has around 400,000 user accounts if that's relevant. How many aliases? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7657) Alias dereferencing with MDB slow compared with BDB
by Mark.Cairney＠ed.ac.uk 08 Aug '13

08 Aug '13

Full_Name: Mark Cairney Version: 2.4.35-RE24 OS: SL 6.4 64-bit URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (129.215.200.23) Having migrated the database of our production service running 2.4.35 from BDB to MDB alias de-referencing stopped working completely (this has already been reported in ITS# 7557). Upgrading to the RE 24 now has alias derefencing working but it is considerably slower than BDB was for the same search. To confirm this I downgraded one of our nodes (we run 4 nodes in multi-master) and on that node the search results are once more acceptable: With MDB: time ldapsearch -H ldaps://alder.authorise.is.ed.ac.uk:636 -b 'ou=staff,ou=law,ou=hss,dc=authorise,dc=ed,dc=ac,dc=uk' -a always "(&(eduniSchoolCode=S26)(eduniCategory=101)(eduniIDStatus=300))" # numResponses: 425 # numEntries: 424 real 0m26.490s user 0m0.028s sys 0m0.032s with BDB: time ldapsearch -H ldaps://oak.authorise.is.ed.ac.uk:636 -b 'ou=staff,ou=law,ou=hss,dc=authorise,dc=ed,dc=ac,dc=uk' -a always "(&(eduniSchoolCode=S26)(eduniCategory=101)(eduniIDStatus=300))" real 0m2.605s user 0m0.054s sys 0m0.006s If there's anything additional I can supply (log files, strace output) let me know. Our OpenLDAP DB currently has around 400,000 user accounts if that's relevant.

1 0

Re: (ITS#7645) various TLSProtocolMin issues
by guenther＠sendmail.com 07 Aug '13

07 Aug '13

[Post-facto. Howard has already committed this] I believe there's two other doc changes that should be added for this: 1) syncrepl accepts tls_protocol_min as a suboption too, 2) for consistency, perhaps slapd-ldap(5) and slapd-meta(5) should use the same <major>[.<minor>] syntax for the value as ldap.conf(5) and slapd.conf(5) ? First two chunks below are for (1), second two for (2). Philip Guenther diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5 index af8beb3..2f8e656 100644 --- a/doc/man/man5/slapd-config.5 +++ b/doc/man/man5/slapd-config.5 @@ -1786,6 +1786,7 @@ FALSE, meaning the contextCSN is stored in the context entry. .B [tls_reqcert=never|allow|try|demand] .B [tls_ciphersuite=<ciphers>] .B [tls_crlcheck=none|peer|all] +.B [tls_protocol_min=<major>[.<minor>]] .B [suffixmassage=<real DN>] .B [logbase=<base DN>] .B [logfilter=<filter str>] diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5 index 70116df..8840e3a 100644 --- a/doc/man/man5/slapd.conf.5 +++ b/doc/man/man5/slapd.conf.5 @@ -1763,6 +1763,7 @@ the contextCSN is stored in the context entry. .B [tls_reqcert=never|allow|try|demand] .B [tls_ciphersuite=<ciphers>] .B [tls_crlcheck=none|peer|all] +.B [tls_protocol_min=<major>[.<minor>]] .B [suffixmassage=<real DN>] .B [logbase=<base DN>] .B [logfilter=<filter str>] diff --git a/doc/man/man5/slapd-ldap.5 b/doc/man/man5/slapd-ldap.5 index 98969e0..8df818c 100644 --- a/doc/man/man5/slapd-ldap.5 +++ b/doc/man/man5/slapd-ldap.5 @@ -114,7 +114,7 @@ needs to be created. .B [tls_cacertdir=<path>] .B [tls_reqcert=never|allow|try|demand] .B [tls_ciphersuite=<ciphers>] -.B [tls_protocol_min=<version>] +.B [tls_protocol_min=<major>[.<minor>]] .B [tls_crlcheck=none|peer|all] .RS Allows to define the parameters of the authentication method that is diff --git a/doc/man/man5/slapd-meta.5 b/doc/man/man5/slapd-meta.5 index a4020b5..9a326d5 100644 --- a/doc/man/man5/slapd-meta.5 +++ b/doc/man/man5/slapd-meta.5 @@ -381,7 +381,7 @@ for details on the syntax of this field. .B [tls_cacertdir=<path>] .B [tls_reqcert=never|allow|try|demand] .B [tls_ciphersuite=<ciphers>] -.B [tls_protocol_min=<version>] +.B [tls_protocol_min=<major>[.<minor>]] .B [tls_crlcheck=none|peer|all] .RS Allows to define the parameters of the authentication method that is

1 0

Re: (ITS#7653) Test Build Version 2.4.36 hangs
by quanah＠zimbra.com 07 Aug '13

07 Aug '13

--On July 31, 2013 6:51:18 AM +0000 howard.allison(a)pensionsversicherung.at wrote: > Full_Name: Howard Allison > Version: 2.4.36 > OS: AIX > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (194.153.217.248) > > > AIX 6.1 Using IBM VAC Compiler > Configure and Build works, test hangs at test005 Hi, thanks for the report. Unfortunately, your stack trace only shows a single thread out of multiple threads. This thread is waiting on another thread to complete a task. Please submit a full backtrace of all threads. Thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7656) Build: Installing LMDB on OS X
by john＠jahewson.com 05 Aug '13

05 Aug '13

Full_Name: John Hewson Version: 2.4.35 OS: OS X 10.8.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.175.89.135) I can't install liblmdb on OS X because its Makefile assumes that cp can handle multiple source files, rather than the basic POSIX cp, which can't. This leads to the situation on OS X where: cp source1 source2 dest throws an error. The breaks the LMDB Makefile, because its install attempts to do: ILIBS = liblmdb.a liblmdb.so ... cp $(IPROGS) $(DESTDIR)$(prefix)/bin Most makefiles I've encountered use a for loop for copying multiple files, so the fix for the Makefile is to change `install` to: install: $(ILIBS) $(IPROGS) $(IHDRS) for f in $(IPROGS); do cp $$f $(DESTDIR)$(prefix)/bin; done for f in $(ILIBS); do cp $$f $(DESTDIR)$(prefix)/lib; done for f in $(IHDRS); do cp $$f $(DESTDIR)$(prefix)/include; done for f in $(IDOCS); do cp $$f $(DESTDIR)$(prefix)/man/man1; done Then LMDB builds and installs successfully on OS X.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs