On 13. juli 2017 16:35, Josh Catana wrote:
We heavily rely on aliases to different OUs to manage access to different
environments, prod/dev/qa/etc.
Don't. Having lots of aliases cancels out the effect of your indexes:
Looking at what it's doing it spending a lot of time with bld_idl_union in
the BDB backend.
(...)
Is this because it has to join aliases to actual CNs?
Yes. Indexing does not look "through" an alias, so a search which
follows aliases must follow every alias in the search scope in order
to check each aliased entry with the filter.
Can I index the alias attribute and if I do would it help performance?
Nope. The best you can do is to index objectClass, which you should.
That tells slapd which entries are alias entries, referral entries etc.
--
Hallvard
