On 13. juli 2017 16:35, Josh Catana wrote:
We heavily rely on aliases to different OUs to manage access to different environments, prod/dev/qa/etc.
Don't. Having lots of aliases cancels out the effect of your indexes:
Looking at what it's doing it spending a lot of time with bld_idl_union in the BDB backend. (...) Is this because it has to join aliases to actual CNs?
Yes. Indexing does not look "through" an alias, so a search which follows aliases must follow every alias in the search scope in order to check each aliased entry with the filter.
Can I index the alias attribute and if I do would it help performance?
Nope. The best you can do is to index objectClass, which you should. That tells slapd which entries are alias entries, referral entries etc.