On 20/11/2009 16:12, Jan Fricke wrote:

Hi members, I'm running openLdap 2.3.43 on CentOS 5.3. At the moment queries that return one entry of 20 take between 300ms and 600ms. The objectClass of the objects I query has no influence. The acl rules that allow users to write have also no significant influence on query speed. If I add

index telephoneNumber eq

to my slapd.conf, queries with (telephoneNumber=123) are very fast but return zero results although they should return one.

Any ideas? I'm running out of ideas (Maybe because I'm new to LDAP :) )

After adding an index to slapd.conf, you need to stop the LDAP server, run slapindex, and start the server again, in order to build the index file.

Presumably running slapindex will speed up all your searches on indexes attributes.

Thanks in advance

Jan

---

Here is my slapd.conf

include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema

allow bind_v2

pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args

loglevel acl

database bdb suffix "dc=myDomain" rootdn "cn=admin,dc=myDomain" rootpw {SSHA}basdfasdfasdfasdfv

directory /var/lib/ldap

# Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub

set_cachesize 0 2097152 0 dbconfig set_lk_max_objects 1500 dbconfig set_lk_max_locks 1500 dbconfig set_lk_max_lockers 1500

access to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=myDomain" write by anonymous auth by self write by * none

access to dn.base="" by users read by dn="cn=admin,dc=myDomain" write

access to dn.exact="dc=myDomain" by * read

access to dn.exact="ou=users,dc=myDomain" by * read

access to dn.sub="ou=users,dc=myDomain" filter=(objectclass=person) by set="user& ([cn=UserManagement,ou=roleRights,dc=myDomain]/member*)" write by self read

access to dn.sub="ou=roles,ou=users,dc=myDomain" by set="user& ([cn=UserManagement,ou=roleRights,dc=myDomain]/member*)" write by * read

access to dn.sub="ou=configs,dc=myDomain" by * read

access to dn.sub="ou=contacts,dc=myDomain" by set="user& ([cn=UserManagement,ou=roleRights,dc=myDomain]/member*)" write by * read

access to dn.sub="ou=roleRights,dc=myDomain" by set="user& ([cn=UserManagement,ou=roleRights,dc=myDomain]/member*)" write by * read

---

And also DB_CONFIG

set_cachesize 0 20097152 0 set_lk_max_objects 1500 set_lk_max_locks 1500 set_lk_max_lockers 1500