Hi Quanah,
We see the same issue with 2.4.58 (compiled from source).
The most common operations are
('attr=authTimestamp', 3890)
('attr=pwdFailureTime', 713)
('attr=userPassword', 29)
('attr=memberuid', 22)
('attr=accountExpiryDate', 21)
('attr=pwdAccountLockedTime pwdFailureTime pwdFailureTime
pwdAccountLockedTime', 20)
('attr=pwdAccountLockedTime pwdFailureTime pwdFailureTime', 16)
('dn="cn=DISABLED_USERS,ou=Groups,dc=org,dc=com"', 15)
('attr=member', 15)
I am able to debug that mod operations are fast on a fresh mdb, but after a
certain number of operations the mdb size is going from 300 MB to 10 GB.
And, the time spent per operation is like 1-2 seconds for every mod, and
5-6 seconds when there are a large number of mods. We also use a group for
disabling users, when running mod to add users to that group we are seeing
all ldap binds and other mods slowing as well. We have sortvals enabled for
all groups.
We have the following indexes:
olcDbIndex: objectClass eq
olcDbIndex: entryCSN eq
olcDbIndex: entryUUID eq
olcDbIndex: uid eq
olcDbIndex: uidNumber eq
olcDbIndex: uniqueMember eq
olcDbIndex: gidNumber eq
olcDbIndex: displayName eq
olcDbIndex: cn eq
olcDbIndex: sn eq
olcDbIndex: member eq
Regards
Bhanush
On Mon, Jan 9, 2023 at 9:11 PM Quanah Gibson-Mount quanah@fast-mail.org
wrote:
--On Friday, December 23, 2022 9:06 PM +0530 Bhanush Mehta
bhanush.mehta@flipkart.com wrote:
Hi All,
We are seeing very slow MOD operations on our ldap (250 MB data dump),
while using mdb (data.mdb is 6.4 Gb). The average MOD operation is going
to 8-9 seconds.
We are seeing 1k disk ops and 6-7MB/s writes. The disk is 4096 IOPS Sata
SSD, we have seen write speed to be 126 MB/s generally.
The slapd version is slapd (May 14 2022 18:35:44).
The above is not a valid version. At a guess you're using an OpenLDAP 2.4
build from Debian, but you'd have to check your package manager to confirm.
It would be helpful to know what the mod operations are doing (I.e.,
adding
new attribute values to a multi-valued attribute that has a lot of values
already, etc)
--Quanah
--
*-----------------------------------------------------------------------------------------*
*This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please notify the
system manager. This message contains confidential information and is
intended only for the individual named. If you are not the named addressee,
you should not disseminate, distribute or copy this email. Please notify
the sender immediately by email if you have received this email by mistake
and delete this email from your system. If you are not the intended
recipient, you are notified that disclosing, copying, distributing or
taking any action in reliance on the contents of this information is
strictly prohibited.*****
****
*Any views or opinions presented in this
email are solely those of the author and do not necessarily represent those
of the organization. Any information on shares, debentures or similar
instruments, recommended product pricing, valuations and the like are for
information purposes only. It is not meant to be an instruction or
recommendation, as the case may be, to buy or to sell securities, products,
services nor an offer to buy or sell securities, products or services
unless specifically stated to be so on behalf of the Flipkart group.
Employees of the Flipkart group of companies are expressly required not to
make defamatory statements and not to infringe or authorise any
infringement of copyright or any other legal right by email communications.
Any such communication is contrary to organizational policy and outside the
scope of the employment of the individual concerned. The organization will
not accept any liability in respect of such communication, and the employee
responsible will be personally liable for any damages or other liability
arising.*****
****
*Our organization accepts no liability for the
content of this email, or for the consequences of any actions taken on the
basis of the information *provided,* unless that information is
subsequently confirmed in writing. If you are not the intended recipient,
you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly
prohibited.*
_-----------------------------------------------------------------------------------------_
