David Coutadeur wrote:
Thank you Howard (and openldap core team) for this synthesis of the current and future state of dynamic membership devs.
Indeed, some of my customers were suffering from dynlist performances, and the decision was taken to go back to more static features (like memberOf).
For now I did not test nestgroup overlay, but I'll give a look for next installations. Do you have any idea in which version of OpenLDAP nestgroup will be officially released?
Most likely 2.7 later this year. But I see no reason why it wouldn't work in 2.5/2.6.
Regards,
Le 26/02/2024 à 16:54, Howard Chu a écrit :
The recent work on expanding dynamic group functionality in the dynlist overlay seems to have been a bad idea. It makes an already fairly complex overlay even more complicated, and it puts a lot more work into the read side of operations, which adds up to quite noticeable slowdowns in search performance on deployments that make heavy use of dynamic groups with large memberships.