LDAP performance issues

[Craig White]

On Sun, 2006-07-02 at 23:46 -0700, Nathan England wrote:
> I have only setup a handfull of machines to authenticate against my ldap box, 
> but I have already noticed performance issues. What is the typical number of 
> machines you can have authenticating against an LDAP box? I haven't really 
> seen any statistics...
----
in that LDAP is optimized as read often, write little, I would expect
that you shouldn't see any performance drop off for the first few
hundred computers accessing it and nothing of a significant performance
hit for the first few thousand systems.

You can tune your cache size to keep the entire thing in RAM (assuming
that your DSA is probably not very large).

Generally, if you are seeing performance slowdowns though, these are the
things you should be looking at:
- searching on unindexed fields (dollars to doughnuts this is your
problem)
- rampant log files (adding to large logs can really slow system down) -
what is loglevel? where is it logging? How big is the file you are
logging to?
- large ssl key ciphers
- cache/RAM - what is cachesize value in slapd.conf?

Craig