Hello,

Le 27/11/13, Ulrich Windl Ulrich.Windl@rz.uni-regensburg.de a écrit :

...

...

...

"POISSON Frédéric"frederic.poisson@admin.gmessaging.net schrieb am

27.11.2013 um 10:46 in Nachricht 3fd84a3867972521.5295cd90@admin.gmessaging.net:

...

Hello,

I'm testing the dynlist overlay on OpenLDAP 2.4.38 because i have a static group of around 10K uniqueMember. I want to have now a equivalent group with

...

dynlist.

I have configured my overlay dynlist like this : dn: olcOverlay={2}dynlist,olcDatabase={1}bdb,cn=config objectClass: olcOverlayConfig objectClass: olcDynamicList olcOverlay: {2}dynlist olcDlAttrSet: {0}groupOfURLs memberURL uniqueMember

And my group is quite like OpenLDAP example in documentation :

dn: cn=GeneralisationDyn,ou=Groups,dc=example,dc=com objectClass: top objectClass: groupOfURLs cn: GeneralisationDyn memberURL: ldap:///ou=People,dc=example,dc=com??one?(objectClass=person) uniqueMember: uid=user1,ou=People,dc=example,dc=com uniqueMember: uid=user2,ou=People,dc=example,dc=com [...]

My backend is Berkeley DB and i have tune it in order to have quite fast responses on searches, and locally on my server (virtualized with a single proc), it take that time to return the entries found by memberURL :

real 0m0.272s user 0m0.040s sys 0m0.023s

Actually, if you sum sys and user, you get 0.07s. Times 10000 gives 700s. So the bulk transfer is quite efficient compared to the single transfer. Also not that the direction of search is different: Once you start from uniqueMember, and the other time you start from DN (I guess).

Sorry i don't understand the way you explain that, it is not clear in my mind. Do the dyngroup plugin run the same ldapsearch as presented inside the memberURL ?

If yes : why showing the uniqueMember from dyngroup overlay takes more time than running the equivalent ldapsearch ?

If not : How the dyngroup overlay works ?

Sorry if my questions are boring...

...

If i run an ldapsearch to see all uniqueMember of my dynamic group it take around 8 to 10 seconds to have the output !

Why a so big difference of response time in a search of entries and a search

...

of uniqueMember inside a dynamic group ? Is there some tuning for dynlist plugin ?

Notice also that when i search uniqueMember inside my static group with quite same number of uniqueMember) i have less than 0.1 seconds of real

time.

...

Thanks, Regards, --

Frederic Poisson

Regards,

--

Frederic Poisson