Hi Quanah,

We see the same issue with 2.4.58 (compiled from source). 

The most common operations are 
('attr=authTimestamp', 3890)
('attr=pwdFailureTime', 713)
('attr=userPassword', 29)
('attr=memberuid', 22)
('attr=accountExpiryDate', 21)
('attr=pwdAccountLockedTime pwdFailureTime pwdFailureTime pwdAccountLockedTime', 20)
('attr=pwdAccountLockedTime pwdFailureTime pwdFailureTime', 16)
('dn="cn=DISABLED_USERS,ou=Groups,dc=org,dc=com"', 15)
('attr=member', 15)

I am able to debug that mod operations are fast on a fresh mdb, but after a certain number of operations the mdb size is going from 300 MB to 10 GB. And, the time spent per operation is like 1-2 seconds for every mod, and 5-6 seconds when there are a large number of mods. We also use a group for disabling users, when running mod to add users to that group we are seeing all ldap binds and other mods slowing as well. We have sortvals enabled for all groups.

We have the following indexes:
olcDbIndex: objectClass eq
olcDbIndex: entryCSN eq
olcDbIndex: entryUUID eq
olcDbIndex: uid eq
olcDbIndex: uidNumber eq
olcDbIndex: uniqueMember eq
olcDbIndex: gidNumber eq
olcDbIndex: displayName eq
olcDbIndex: cn eq
olcDbIndex: sn eq
olcDbIndex: member eq

Regards
Bhanush


On Mon, Jan 9, 2023 at 9:11 PM Quanah Gibson-Mount <quanah@fast-mail.org> wrote:


--On Friday, December 23, 2022 9:06 PM +0530 Bhanush Mehta
<bhanush.mehta@flipkart.com> wrote:

>
> Hi All,
>
> We are seeing very slow MOD operations on our ldap (250 MB data dump),
> while using mdb (data.mdb is 6.4 Gb). The average MOD operation is going
> to 8-9 seconds.
> We are seeing 1k disk ops and 6-7MB/s writes. The disk is 4096 IOPS Sata
> SSD, we have seen write speed to be 126 MB/s  generally.
>
> The slapd version is slapd  (May 14 2022 18:35:44).

The above is not a valid version.  At a guess you're using an OpenLDAP 2.4
build from Debian, but you'd have to check your package manager to confirm.

It would be helpful to know what the mod operations are doing (I.e., adding
new attribute values to a multi-valued attribute that has a lot of values
already, etc)

--Quanah




-----------------------------------------------------------------------------------------

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this email. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. If you are not the intended recipient, you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

 

Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the organization. Any information on shares, debentures or similar instruments, recommended product pricing, valuations and the like are for information purposes only. It is not meant to be an instruction or recommendation, as the case may be, to buy or to sell securities, products, services nor an offer to buy or sell securities, products or services unless specifically stated to be so on behalf of the Flipkart group. Employees of the Flipkart group of companies are expressly required not to make defamatory statements and not to infringe or authorise any infringement of copyright or any other legal right by email communications. Any such communication is contrary to organizational policy and outside the scope of the employment of the individual concerned. The organization will not accept any liability in respect of such communication, and the employee responsible will be personally liable for any damages or other liability arising.

 

Our organization accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. If you are not the intended recipient, you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

-----------------------------------------------------------------------------------------