I'm testing the dynlist overlay on OpenLDAP 2.4.38 because i have a static group of around 10K uniqueMember. I want to have now a equivalent group with dynlist.

I have configured my overlay dynlist like this :
dn: olcOverlay={2}dynlist,olcDatabase={1}bdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcDynamicList
olcOverlay: {2}dynlist
olcDlAttrSet: {0}groupOfURLs memberURL uniqueMember

And my group is quite like OpenLDAP example in documentation :

dn: cn=GeneralisationDyn,ou=Groups,dc=example,dc=com
objectClass: top
objectClass: groupOfURLs
cn: GeneralisationDyn
memberURL: ldap:///ou=People,dc=example,dc=com??one?(objectClass=person)
uniqueMember: uid=user1,ou=People,dc=example,dc=com
uniqueMember: uid=user2,ou=People,dc=example,dc=com

My backend is Berkeley DB and i have tune it in order to have quite fast responses on searches, and locally on my server (virtualized with a single proc), it take that time to return the entries found by memberURL :

real    0m0.272s
user    0m0.040s
sys     0m0.023s

If i run an ldapsearch to see all uniqueMember of my dynamic group it take around 8 to 10 seconds to have the output !

Why a so big difference of response time in a search of entries and a search of uniqueMember inside a dynamic group ?
Is there some tuning for dynlist plugin ?

Notice also that when i search uniqueMember inside my static group  with quite same number of uniqueMember) i have less than 0.1 seconds of real time.


Frederic Poisson