Load from Resource in IDM 5.0 SP5

Question

I have installed IDM 5.0, SP 5, with Sun Java System Application Server 8. I have 2 resources, one LDAP (Sun Directory Server 5.2, SP 3) and one Active Directory.
I have just completed a 'Load from Resource', and loaded user information from the LDAP resource, which created 43 thousand or so user objects in IDM. I have 2 questions:
1. The load took a loooong time - 1 day, 4 hours. Is this normal? I am currently loading information for approximately 19 thousand accounts from the AD resource, which looks like it will take a similar amount of time per account (still running at the moment).
2. Now, when I select the 'Accounts' tab in the admin console when logged in as configurator, the list of accounts never appears. The browser session (mozilla) will die after about 2 minutes. The only way I can view user account information is to select the stop button in the browser immediately after selecting the 'Accounts' tab, and then select the 'Find Users' button on the left hand pane.

Answer 1

The load of the AD accounts (21,000) has now finished. This took 23 hours!!
I have analyzed, to some extent, the load process, from the LDAP perspective, and what appears to be happening is:
1. IDM queries LDAP for the number of account entries defined by the block count (1000 in my case) in the IDM resource definition. I suspect this is being done with an ldapsearch, perhaps with the -x and -S options, as the LDAP log details a query, then a sort on uid EVERY time the 1000 entries are retrieved. This, however, is only a minor part of the issue, as the sort takes about 5 minutes on the LDAP server. This would only account for about 200 minutes of my 1day, 4 hours.
2. After the block of 1000 is retrieved, IDM seems to go off into limbo for about 1 hour each time, with the appserverDAS process consuming about 30-40% CPU. I have an oracle database for the indexes, and that seems to be pretty relaxed during this time - there is some activity, but not in any real anger like the application server.
I can't analyze what's going on with the AD load, as I am not the custodian of the AD servers, and prefer to know as little as possible about them ;-)
I suppose this is not too much of a problem, as I will only performing the 'load from resource' once when we go into production, but I am concerned about the impact of a reconcilliation. I will start one immediately, and respond with itming when it finishes.
As for the list of users, how can I stop the account list from being the first thing accessed when I select the 'Accounts' tab? I would prefer not to have to import all accounts into a separate org just to facilitate access to the interface.
BTW - to be consistent with the documentation, shouldn't the references to 'Accounts' within the interface really read 'Users'. As I read the documentation, a 'User' is an IDM object which may (or may not) have resource 'Accounts'. If they are to be referred to as 'Accounts', then the two Users 'Configurator' and 'Administrator' should not appear there, as they do not, by default, have a resource equivalent. Or maybe I'm just a pedant :-)
Anyway, thanks for any help you can provide.