LDAP performance issues

[George Toft]

often we don't have control over how the searches are performed as the 
vendor-provided code is beyond our ability to change, and they heartily 
resist us mere end users telling them how to fix their code.

George Toft, CISSP, MSIS
My IT Department
www.myITaz.com
480-544-1067

Confidential data protection experts for the financial industry.


Craig White wrote:
> That all depends upon how you search (base/one/sub)
> 
> If you are hierarchical in plan but sub search all the hierarchies,
> there is nothing gained from the hierarchy.
> 
> Craig
> 
> On Tue, 2006-07-04 at 11:53 -0700, George Toft wrote:
> 
>>Schema is a big factor as well.  Flat schemas with lots of members per 
>>ou are much worse than hierarchical schemas with few members per ou.
>>
>>George Toft, CISSP, MSIS
>>My IT Department
>>www.myITaz.com
>>480-544-1067
>>
>>Confidential data protection experts for the financial industry.
>>
>>
>>Craig White wrote:
>>
>>>On Sun, 2006-07-02 at 23:46 -0700, Nathan England wrote:
>>>
>>>
>>>>I have only setup a handfull of machines to authenticate against my ldap box, 
>>>>but I have already noticed performance issues. What is the typical number of 
>>>>machines you can have authenticating against an LDAP box? I haven't really 
>>>>seen any statistics...
>>>
>>>----
>>>in that LDAP is optimized as read often, write little, I would expect
>>>that you shouldn't see any performance drop off for the first few
>>>hundred computers accessing it and nothing of a significant performance
>>>hit for the first few thousand systems.
>>>
>>>You can tune your cache size to keep the entire thing in RAM (assuming
>>>that your DSA is probably not very large).
>>>
>>>Generally, if you are seeing performance slowdowns though, these are the
>>>things you should be looking at:
>>>- searching on unindexed fields (dollars to doughnuts this is your
>>>problem)
>>>- rampant log files (adding to large logs can really slow system down) -
>>>what is loglevel? where is it logging? How big is the file you are
>>>logging to?
>>>- large ssl key ciphers
>>>- cache/RAM - what is cachesize value in slapd.conf?
>>>
>>>Craig
>>>
>>>---------------------------------------------------
>>>PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>>>To subscribe, unsubscribe, or to change  you mail settings:
>>>http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>>
>>>
>>
>>---------------------------------------------------
>>PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>>To subscribe, unsubscribe, or to change  you mail settings:
>>http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
> 
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
>