Re: [LDAP] Speeding up authentication using ldap

Davide Bianchi wrote:
> After some digging and checking I find out that the problem is the
> retrieval of the groups to which the user belongs. The nss library
> run a search of the type
>
> (&(objectClass=posixGroup)(|(memberUid=usernameher e)(uniqueMember=theDNhere)))
>
> And this takes about 25 seconds to retrieve the groups. I noticed that if
> I use the non-RFC 2307 Bis query type
>
> (&(objectClass=posixGroup)(memberUid=usernamehere) )
>
> it returns the same data but it takes only a fraction of a second.

Sounds like you need an index on uniqueMember. Dunno. Ask an LDAP group
(and send the relevant schema)... If I remember right, you can also turn
on debugging during a search and you can watch what searches the
database does that aren't indexed.

- Mike Johnson