[Samba] Samba-3.0.1pre1 and LDAP

[Kristyan Osborne]

Hi Jerry

The index's I have are uid, uidNumber, gidNumber, cn, objectClass, default  eq

when I start slapd with debug level 2, I can see a lot of searches  for users and a hell of a lot of searches for groups. These happen virtually every second. 

Cheers

-------------
Kristyan Osborne - IT Technician / Community Manager
Longhill High School
01273 391672 / 304086

------
Computers are like airconditioners: They stop working properly if you open windows.
Win95:       A 32-bit patch for a 16-bit GUI shell running on top of an
             8-bit operating system written for a 4-bit processor by a
             2-bit company who cannot stand 1 bit of competition.



-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry at samba.org]
Sent: 03 November 2003 16:58
To: Kristyan Osborne
Cc: Samba (E-mail)
Subject: Re: [Samba] Samba-3.0.1pre1 and LDAP


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kristyan Osborne wrote:
| Hiya,
|
| I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The
| upgrade went well with no real problems, except .....
|
| I have noticed today that the load on the LDAP server is
| extremely high. CPU usage on slapd is anywhere between 10%-80%.
| At one point to day everything came to a grinding halt. The
| only difference between I can think of is the samba upgrade.
| This is with an average load of about 300 users.

Check you indexes on the OpenLDAP server.
Look at the searches being made.  Make sure you
are indexing the rigth attributes.

Also see the OpenLDAP FAQ (http://www.openldap.org/)
for details on tuning bdb backends.  Limit regex's
in slapd.conf ACLs as well.





cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/pokBIR7qMdg1EfYRAnmRAJ93GJTyE3/PBYRVIkedA3NltsyMkwCglP/n
yiZ0S9fqpJ5U1bFFgbqof4Y=
=VOHL
-----END PGP SIGNATURE-----