SUN DSEE 6.2 vs Fedora DS 1.1 performance comparison

Hi all,
I've just discovered a nice tool from SUN about performance analysis for ldap servers named SLAMD (http://www.slamd.com)
So I configured it and tried to analyze my servers. I've setup one SUN DSEE 6.2 and one Fedora DS 1.1
in my workstation. Both of them being populated with the same data (160 sample entries from sun) and using the same file descriptors.
My workstation is running fedora 8, Core(TM)2 Duo CPU E6550 @ 2.33GHz / 2 GB ram.
I did a couple of tests but all of them had the same search filters
Entry DN           ou=people,dc=example,dc=com
Search Filter           objectClass=*
Attribute(s) to Compare/Modify      Add Operation Frequency           3
Compare Operation Frequency           7
Delete Operation Frequency           4
Modify Operation Frequency           4
Modify RDN Operation Frequency           1
Search Operation Frequency           10      description
I will give the results of my final test which lasted 240 seconds / 200 threads from one client
DS Overall Operations (Average/sec)
SUN *35,858*
Fedora *304,867*
It seems to me there is a huge difference! I didn't expect to get such numbers. To tell you the truth
I expected SUN DS to be much faster that Fedora DS instead of being *10 times slower*.
Furthermore while running the test on the Fedora DS the system got a max load of around 7-8 which implied that the system
worked hard to perform the test (CPU always at 100%).
On the other hand while running the SUN DS test, the system never got load more that 1 (cpu not more that 22%).
It was like the SUN DS was capable to do better but it was never bothered. I played with indexes, file descriptors, number of threads without
any significant change of performance.
I'm sure SUN DS can do better. So I'm looking for thoughts on the subject as well as performance tunning/optimization documentation.
Is the resource kit also available for 6.2 or is it just for SUN ONE server?
regards
Giannis

Giannis,
Giving raw performance numbers doesn't mean anything unless you also provide the details of the data in your directory server, the settings and the exact tests performed (if it's a slamd standard job, give its name).
Slamd contains many jobs that are doing many different things leading to completely different numbers in term of operations per second.
This said, the numbers you show are puzzling me : SUN 35,858 vs Fedora 304,867 (Operations / Second) ?
I assume the , is the unit separator (and not like in the US the separator between thousands and hundreds).
If so, there is definitely something badly configured on Sun DS and/or Slamd.
Regards,
Ludovic.

Similar Messages

  • Install Sun Java Web System on Fedora / Registering in Netbeans

    Hi,
    I am trying to install Sun Java System Webserver onto Fedora 64 bit - I am not bothered about running a server locally, I have a development server for testing before deployment - however, I need to get a working install to let Netbeans recognise it as a valid target server. As far as I am aware, all Netbeans needs when deploying to a remote server is some libraries associated with that J2EE server. So first of all I tried just pulling the tree of an installed and working server off another box - however, Netbeans won't play ball.
    When trying to install the server on Fedora I get an error regarding
    /sun/webserver7/lib/libfreebl3.so: version `NSSRAWASH_3.12.3' not found
    Any ideas, if not, any ideas how to 'trick' Netbeans into thinking the server is installed?
    Regards,
    Tom

    Hi,
    Thanks for your replies, so far I have managed to persuade netbeans to recognise the broken install by adding this block to ~/.netbeans/6.5/config/J2EE/InstalledSerers/.nbattrs
    <fileobject name="instance">
    <attr name="LocalServer" stringvalue="true"/>
    <attr name="SSLAdminPort" stringvalue="true"/>
    <attr name="configName" stringvalue="tom-desktop"/>
    <attr name="displayName" stringvalue="Sun Java System Web Server 7.0"/>
    <attr name="password" stringvalue="xxxxxxxx"/>
    <attr name="registeredWithoutUI" stringvalue="false"/>
    <attr name="url" stringvalue="[/home/twerner/webserver7]deployer:Sun:WebServer70::localhost:8989"/>
    <attr name="username" stringvalue="admin"/>
    </fileobject>However, it would be good to get the server actually working...
    I am running Fedora 11 - 64 Bit (I like to live dangerously :-))
    I am attempting to do the install using the seperate Web server installer on its own, downloaded direct from Sun's site (v7u5).
    Here is the log file : [http://pastebin.com/f716536d6]
    Installed nss packages:
    nss.i586 3.12.3-4.fc11 @fedora
    nss.x86_64 3.12.3-4.fc11 installed
    nss-mdns.x86_64 0.10-7.fc11 installed
    nss-softokn-freebl.i586 3.12.3-4.fc11 @fedora
    nss-softokn-freebl.x86_64 3.12.3-4.fc11 installed
    nss_ldap.x86_64 264-2.fc11 installed
    Hopefully some of this info is useful,
    Many thanks for your help,
    Tom
    Edited by: tomwerner on Jul 13, 2009 2:09 AM

  • Upgrade 32–bit Sun DSEE Server Instances with 64-bit RHEL 4.6?

    I want to update 32–bit Sun DSEE Server Instances with 64-bit RHEL 4.6 to 64-bit ODSEE 11.1.1.5.0 with 64-bit RHEL 4.6.
    Thanks

    But it will be on the same physical machine or on a separate server? How big will be the DB?
    Will be in the same topology? Separate topologies?
    If you can afford some downtime and you've got different machines, you could plan a 'cold' migration:
    - Stop the old DS instance
    - Export to LDIF with NO REPLICA INFORMATION (this will also clean up a bit the DB!)
    - Copy schema and indexes definition from source to target environment.
    - Import from LDIF to the new DS topology
    After that you'll have to tune the new environment, in terms of memory , entry cache, indexes, etc...
    HTH,
    Maco

  • Migrating Linux shadow-file MD5 passwords to Sun DSEE for Solaris/SunMail

    Hello all,
    We are about to undertake migration of an outdated mail server based on RedHat 7.2 and Sendmail/ipop3d to Sun Messaging Server (JCS6u2). While the filesystem/mail are not a problem, we're stuck at the question of how to best migrate old users' identities.
    The old Linux system used user names and password hashes stored in /etc/passwd and /etc/shadow files. Hashes are mostly MD5 and a few seem like crypt.
    Question is: are there known incompatibilities between password hashes (algorithms, expected format) in Linux and Sun products - Solaris/DSEE/SunMail?
    That is, if we just take strings like these:
    usemd5:$1$Wu7IqFT5$TeUht3OMdeSSBB3Vab4dB.:11262:0:::::134540116
    usecrypt:DD2kEwCD8nies:10220::::::
    Can we simply place the second column as the userPassword attribute in Sun DSEE and expect that users would be able to log in to LDAP-enabled Solaris and Sun Mail with their old passwords knownst only to them?
    If not, is there some simple modification/translation of such hashes to a format accepted by Sun products?
    Or are these formats/algorithms known to be incompatible somehow in a fatal manner, so our only option would be generation of new passwords for Sun DSEE and its clients?
    Thanks,
    //Jim

    Just to reclarify or throw more information:
    a password - cleartext value - testuser1 has 32-digit HEX value as - 41da76f0fc3ec62a6939e634bfb6a342
    Same password when converted to Base64 pattern becomes - Qdp28Pw+xippOeY0v7ajQg==
    But when I use pwdhash utility in DSE after configuring CRYPT to use MD5 hashes it becomes -
    {crypt}$md5$$LiB/H70zXr3xfQPoXVuUQ1
    I used below command :
    pwdhash -D /opt/SUNWdsee/dsee6/ds6/slapd-oha-dev -s CRYPT testuser1
    Actual hash value of pwdhash is -LiB/H70zXr3xfQPoXVuUQ1 with rest of the prefix is to meet RFC standard and salt and algo name separator.
    I am wondering if Sun MD5 default uses any salt even when I haven't used or DS does it. Or if any other MD5 option is there which can be used.
    Thanks,
    Gaurav

  • Looking for Performance Comparisons Between JRockit 6 and Sun Java SE 6

    Hello,
    Can someone point me to some performance comparisons (benchmarks, etc.) between the JRockit and Sun JVMs?
    Thanks in advance.

    Hi Ben.
    Before I send to to the SPEC sites (which can be a tad hard to parse) I must ask - What application or type of application are you interested in? The answer will vary a bit depending on what you need.

  • Sun Ray server software and Sun DSEE

    I want to have a centralized user administration in the latest sun java 7 directory server. i want to set up the system in that the users of the sun ray thin clients will be authenticated from
    the DSEE. Please assist me in how to make this work.

    Basically, you Sun Ray server must be an LDAP client: it must be set up so that when logging in, it actually authenticates users against DSEE.
    DSEE can be installed on the same host as the Sun Ray server, but it's not a requirement. On the contrary, in such a case, you've got to be
    careful in the start order of services at boot time. So the easiest way is to have DSEE and the Sun Ray server on separate machines.
    How to configure both servers is explained here: http://download.oracle.com/docs/cd/E18752_01/html/816-4556/ldapsetup-1.html
    Or at least, it's a good starting point.

  • Sun DSEE and LDAP C Client

    Hi All,
    I have installed Sun Java System Directory Server Enterprise Edition
    (DSEE) 6.1 on Red Hat Enterprise Linux Release 4 Update 3. Now I will
    be developing an LDAP client application using C++ programming
    language.
    My question is should the client application be written using the
    client library distributed by Sun themselves? Or can I develop the
    LDAP client application using any (eg. OpenLDAP) LDAP client
    library?
    Any help on this much appreciated.
    Thank you.
    Rgds,
    anna

    My question is should the client application be
    written using the
    client library distributed by Sun themselves? Or can
    I develop the
    LDAP client application using any (eg. OpenLDAP) LDAP
    client
    library?Sun Directory Server works well with either flavor, so you can use whichever you prefer for your application.

  • Oracle Directory Server Enterprise Edition/Sun DSEE  oim11g r2 connector

    Hi,
    is there any OOTB  oim 11g r2 connector available for Oracle Directory Server Enterprise Edition/Sun DSEE

    Yes. The standard LDAP OIM ICF connector fully support ODSEE.

  • DSEE problem with SElinux on CentOS

    Hi,
    this morning tried to install DSEE 7.0 on a CentOS 5.4 system and had problems starting a directory server instance, due to SElinux. With SElinux disabled there is no problem, however as soon as SElinux is enabled I get errors. Later on tried SElinux enforcing enabled with DSEE 6.3.1 and got the same problem. The error I get with SElinux enabled is:
    $ sudo /srv/sun/DSEE/dsee6/ds6/bin/dsadm start '/srv/sun/DSEE/instances/dnldap01'
    Password:
    /srv/sun/DSEE/dsee6/ds6/lib/ns-slapd: error while loading shared libraries: /srv/sun/DSEE/dsee6/ds6/lib/libsh.so: cannot restore segment prot after reloc: Permission denied
    /srv/sun/DSEE/dsee6/ds6/lib/ns-slapd -D /srv/sun/DSEE/instances/dnldap01 -i /srv/sun/DSEE/instances/dnldap01/logs/pid failed: err=127
    Failed to start Directory Server instance '/srv/sun/DSEE/instances/dnldap01'
    After disabling SElinux, there is no problem:
    $ sudo /srv/sun/DSEE/dsee6/ds6/bin/dsadm start '/srv/sun/DSEE/instances/dnldap01'
    Directory Server instance '/srv/sun/DSEE/instances/dnldap01' started: pid=4014
    Information:
    $ /srv/sun/DSEE/dsee6/ds6/lib/ns-slapd -V
    Sun Microsystems, Inc.
    Sun-Java(tm)-System-Directory/6.3.1 B2008.1121.0522 32-bit
    ns-slapd : 6.3.1 B2008.1121.0522 DirectoryServices631_branch (Linux clochette 2.4.21-37.ELsmp #1 SMP Wed Sep 7 13:32:18 EDT 2005 x86_64 x86_64 x86_64 GNU/Linux) ZIP
    Slapd Library : 6.3.1 B2008.1121.0522 DirectoryServices631_branch (Linux clochette 2.4.21-37.ELsmp #1 SMP Wed Sep 7 13:32:18 EDT 2005 x86_64 x86_64 x86_64 GNU/Linux)
    Front-End Library : 6.3.1 B2008.1121.0522 DirectoryServices631_branch (Linux clochette 2.4.21-37.ELsmp #1 SMP Wed Sep 7 13:32:18 EDT 2005 x86_64 x86_64 x86_64 GNU/Linux)
    The company policy is to enforce SElinux; what do I need to do to be able to start the directory instance with SELinux enabled? And the same question applies to the directory proxy server instance.
    Any suggestions appreciated,
    /rolf

    DSEE 6 or 7 have not been tested with SELinux, therefore unsupported.

  • Problem with adding CA signed Certificate to DSEE Ldap Instance

    I am trying to enable SSL with the SUN DSEE LDAP server.
    DSEE version: 6.0
    Solaris version: 10.3
    I am following instructions from the SUNDSEE-ADMIN guide to generate the cert request, and got the signed certificate file. So here is my procedure:
    1. generate cert request:
    dsadm request-cert ...
    2. send the request file to CA
    3. got the signed cert back from CA with format like this:
    ----------BEGIN CERTIFICATE------------
    ----------END OF CERTIFICATE----------
    So now I got two files at hand: the cert request, and the signed cert.
    Then I am trying to add the cert to the cert store for my LDAP instance:
    $ dsadm add-cert /path/to/instance my-cert ldapcert.crt
    Unable to find private key for this certificate.
    Failed to add the certificate.
    $ dsadm add-cert -C /path/to/instance my-cert ldapcert.crt
    This command will complete. But if you list cert, you can only see the CA cert, no new server cert.
    My question is, where is this private key file stored? I searched on the forum, and someone mentioned the private key is generated when you issue request-cert command.
    So how can I add the server cert? What procedure am I missing here? If you only get one cert file which only has the public key in it from CA, how do you add the server cert apart from the CA cert?
    Let me know if I have a wrong understanding for the procedure.
    Thanks!

    I looked at this certificate under windows. It has a certificate chain issued for our LDAP server:
    CA root
    |----- LDAP server
    It looks fine. It is the signed server cert.
    I tested import-cert the self-signed cert which has both the private key and public key packed together, and it worked. A new cert is shown up for both "dsadm list-certs" and "dsadm list-certs -C".
    But when trying to import the CA-signed server cert, it complains that no private key is found.
    I am following instructions from this link:
    http://docs.sun.com/app/docs/doc/819-0995/6n3cq3aqp?a=view
    But if I do add-cert, I got this error:
    $ dsadm add-cert /path/to/instance my-cert ldapcert.crt
    Unable to find private key for this certificate.
    Failed to add the certificate.It works to import the CA cert though. Can someone advise about the private key missing issue?
    Thanks.

  • Getting Sun Calendar (csconfigurator.sh/comm_dssetup.pl) - my LDAP server

    I currently am trying to install a Sun Calendar server on a CentOS4
    machine which has working kerberos/ldap server access. Unfortunately
    when I try to run the csconfigurator script, despite correct entries
    and connections verified through 'ldapsearch' on a command line, I
    receive a protocol error #2 when csconfigurator tries to verify the
    connection to the LDAP server.
    I am using openldap on a ubuntu instance for the kerberos/ldap server,
    I believe that it is using v3 of LDAP. Is there anything in
    particular I need to know about how Calendar wants to access LDAP? I
    know that I saw a lot of documentation referring to Sun's Directory
    Server; all of the documentation that I dug up on this gave me the
    impression that it was just a standard LDAP server, thus leading me to
    believe that my current LDAP server should work alright.
    I would appreciate any pointers in the right direction or tips, and
    I'm certainly able to cut 'n paste any information that would be
    applicable to this issue. I really need to try to get this calendar
    server online as fast as possible, but the documentation that I've
    found seems to gloss over some of the areas where I'm having issues.
    Thanks for your time!
    -Damon Getsman

    You didn't mention which LDAP server you are using, however, JCS is really designed to work with Sun Directory Server.
    That isn't to say that one could not run JCS against OpenLDAP, etc but you would need to potentially modify the schema files that are part of comm_dssetup.pl
    The JCS 5 release notes contain product requirements:
    [http://docs.sun.com/app/docs/doc/819-4439/6n6jehs0r?a=view]
    The sequence is to install LDAP (nominally Sun DSEE), run comm_dssetup.pl, and then install Calendar Server against your LDAP instance.

  • ODSEE 11G VS DSEE 6.3.1 Classes

    We are running Sun DSEE 6.3.1. I am a new admin and looking for classes on it. I was wondering if anyone knows if the ODSEE 11G courses will be helpful in this area or if too much has changed? I'm having trouble finding classroom courses for DSEE 6.3.1. We'll likely be upgrading to ODSEE anyways down the line.

    user13471064 wrote:
    We are running Sun DSEE 6.3.1. I am a new admin and looking for classes on it. I was wondering if anyone knows if the ODSEE 11G courses will be helpful in this area or if too much has changed? I'm having trouble finding classroom courses for DSEE 6.3.1. We'll likely be upgrading to ODSEE anyways down the line.??? http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getSchedPage?page_id=4&dc=D69253GC11
    Or try starting at:
    http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=402&p_nl=ORMM
    to
    http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getSearchResults?p_search_keyword=Directory%20Server&p_fuzzy_match=N&p_output_style=P&p_header_yn=N&p_search_category_id=&p_delivery_language=US
    .... You may wel have been to these pages already. Its worth checking the course contents for the v6 and 11g and comparing yourself ....
    Otherwise try contacting Oracle University for help.
    You may have done these things already.

  • Problem starting Sun One Application - JMS Exception

    Hello,
    I'm having some trouble trying to start SunONE JMS sever via the Sun ONE application server v7 running on RedHat Linux 7.3.
    When I start the app server via the asadmin tool I receive the following exception,
    [root@sc-test1 config]# asadmin start-appserv
    Instance domain1:admin-server started
    Could not start the instance: domain1:server1
    server failed to start: abnormal subprocess termination
    Could not start one or more instances in the domain : domain1
    Could not start one or more domains
    The following exception is outputted to the server log,
    19/Sep/2003:15:47:14] INFO ( 2135): CORE1116: Sun ONE Application Server 7.0.0_00
    [19/Sep/2003:15:47:15] INFO ( 2137): CORE3016: daemon is running as super-user
    [19/Sep/2003:15:47:17] INFO ( 2137): CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.4.1] from [Sun Microsystems Inc.]
    [19/Sep/2003:15:47:54] INFO ( 2137): JMS5035: Timed out after 30000 milliseconds while trying to verify if the JMS service startup succeeded.
    [19/Sep/2003:15:47:54] INFO ( 2137): JMS5036: More details may be available in the log file for the JMS service broker instance domain1_server1. Please refer to the JMS provider documentation for the exact location of this log file.
    [19/Sep/2003:15:47:54] SEVERE ( 2137): JMS5024: JMS service startup failed.
    [19/Sep/2003:15:47:54] SEVERE ( 2137): CORE5071: An error occurred during initialization
    com.sun.appserv.server.ServerLifecycleException: [C4003]: Error occurred on connection creation. - caught java.net.ConnectException
    at com.iplanet.ias.jms.JmsProviderLifecycle.onInitialization(JmsProviderLifecycle.java:247)
    at com.iplanet.ias.server.ApplicationServer.onInitialization(ApplicationServer.java:206)
    at com.iplanet.ias.server.J2EERunner.confPreInit(J2EERunner.java:114)
    Caused by: com.sun.appserv.server.ServerLifecycleException: [C4003]: Error occurred on connection creation. - caught java.net.ConnectException
    at com.iplanet.ias.jms.JmsProviderLifecycle.onInitialization(JmsProviderLifecycle.java:231)
    ... 2 more
    Caused by: javax.jms.JMSException: [C4003]: Error occurred on connection creation. - caught java.net.ConnectException
    at com.sun.messaging.jmq.jmsclient.ExceptionHandler.getJMSException(ExceptionHandler.java:183)
    at com.sun.messaging.jmq.jmsclient.ExceptionHandler.handleException(ExceptionHandler.java:136)
    at com.sun.messaging.jmq.jmsclient.PortMapperClient.readBrokerPorts(PortMapperClient.java:145)
    at com.sun.messaging.jmq.jmsclient.PortMapperClient.init(PortMapperClient.java:86)
    at com.sun.messaging.jmq.jmsclient.PortMapperClient.<init>(PortMapperClient.java:47)
    at com.sun.messaging.jmq.jmsclient.protocol.tcp.TCPConnectionHandler.<init>(TCPConnectionHandler.java:46)
    at com.sun.messaging.jmq.jmsclient.protocol.tcp.TCPStreamHandler.openConnection(TCPStreamHandler.java:101)
    at com.sun.messaging.jmq.jmsclient.ProtocolHandler.init(ProtocolHandler.java:501)
    at com.sun.messaging.jmq.jmsclient.ProtocolHandler.<init>(ProtocolHandler.java:930)
    at com.sun.messaging.jmq.jmsclient.ConnectionImpl.openConnection(ConnectionImpl.java:1482)
    at com.sun.messaging.jmq.jmsclient.ConnectionImpl.init(ConnectionImpl.java:403)
    at com.sun.messaging.jmq.jmsclient.ConnectionImpl.<init>(ConnectionImpl.java:234)
    at com.sun.messaging.jmq.jmsclient.UnifiedConnectionImpl.<init>(UnifiedConnectionImpl.java:33)
    at com.sun.messaging.jmq.jmsclient.QueueConnectionImpl.<init>(QueueConnectionImpl.java:32)
    at com.sun.messaging.ConnectionFactory.createQueueConnection(ConnectionFactory.java:72)
    at com.sun.messaging.jmq.admin.jmsspi.JMSAdminImpl.pingProvider(JMSAdminImpl.java:733)
    at com.iplanet.ias.jms.JmsProviderLifecycle.waitForJmsProvider(JmsProviderLifecycle.java:284)
    at com.iplanet.ias.jms.JmsProviderLifecycle.onInitialization(JmsProviderLifecycle.java:224)
    ... 2 more
    [19/Sep/2003:15:47:54] SEVERE ( 2137): CORE3186: Failed to set configuration
    I can confirm that the default JMS port (7676) is not be used elsewhere / by another process on the server and that netfilter/iptables are not active/running.
    I have also tried different/alternative ports for the JMS server however it still fails to startup.
    Any help much appreciated.
    Thanks and Regards,
    Rachel Gilmer

    I have encountered similar problem when running Sun Application server 7 in Fedora Core 2.
    It seems that problem was due to improper shutdown of my system.
    Following was what I did to resolve the problem:
    Look for the JMS installation directory (installed & created together with the application server). Mine is in /var/opt/imq. In the dir,
    look for directory instances/domain1_server1 (if your server is running in domain1 server1). Look for a file called lock. Remove the lock file (rename if you are not sure).
    After that I was able to successfully start the server.

  • DSEE 6.3.1 - Slow ldapsearch Queries

    We've recently upgraded to Sun DSEE version 6.3.1 from SunONE Directory Services 5.1.
    We have some utilities that extract a list of all users in the LDAP repository and check certain aspects of the accounts. We recently found that the following ldapsearch query executed on a suffix containing only 5 entries took over 45 seconds to complete:
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(objectclass=*)" uid The following message was displayed in the error log:
    [12/Nov/2009:12:34:08 -0600] - WARNING<20805> - Backend Database - conn=45187 op=1 msgId=2 -  search is not indexed base='ou=people,o=test-suffix' filter='(objectClass=*)' scope='sub'Since objectclass is a system index and cannot be modified we tried wildcard searches on other known fields, such as:
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(uid=*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(cn=*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(dn=*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(sn=*)" uidAll of these searches took roughly the same amount of time (~45 seconds). However, if the wildcard searches are refined slightly so they do not return all the entries in the suffix they execute instantaneously.
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(uid=A*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(cn=A*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(dn=A*)" uid
    ldapsearch -h policy.test.com -p 389 -D "cn=Directory Manager" -b "ou=People, o=test-suffix" -s sub "(sn=A*)" uid Also, I found some information on the referential integrity plugin and have indexed the fields used and regenerated the indexes. This did not have any effect on the performance.
    It seems that any query that will return all entries in the suffix gets the "search is not indexed" error and takes an inordinate amount of time to complete. It doesn't seem to matter which fields (indexed or not indexed) are in the query filter.
    Is this the expected behavior, or am I missing something? If so, what is the preferred method for retrieving a list of all entries in a suffix?

    Thank you guys. It does make sense that a rescan of the database is needed, although the ability to index all objectclasses and use this index in an exhaustive search would be nice.
    One more aspect though: can these searches be parallelized? I have a Niagara (Sun Fire T2000) acting as one of several DSEE 6.3 (not yet 6.3.1) servers in a group of servers balanced by a DPS. While this box can take a lot of queries at once, it seems to execute each one in a single process or LWP. Thus it takes very long to complete an exhaustive search (like 4 minutes), although it can complete over a dozen parallel searches in the same 4 minutes :)
    I tried to tweak the number of threads with dsconf set-server-prop, but it did not seem to influence anything.
    Is it possible to parallelize a single query in DSEE spreading it over several CPUs? (Maybe not in the DS instance but in DPS; I have set the balancing option to "Proportional" but it also did not seem to help spread the load over CPUs, although it does seem to contact and use several instances - "data-sources").
    Thanks,
    //Jim

  • DSEE 7 error code 12 - Sort Response Control for server side sort

    I am using Sun DSEE 7, My application works fine for small data set (e.g. 1000) and gives me correct sorted result, but same code fails for large data set (e.g. 656000). I find that for large data set, I am getting the error "*javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Sort Response Control];*". I have changed the look-throught-limit, size-limit and time-limit values to unlimited using dsconf utility. I changed db cache size, entry cache size to appropriate values and also i increased all-id-threshold, all-ids-threshold-eq, all-ids-threshold-pres to the max possible value (2147483646) for one index attribute which i am using in my query but still exception is coming. If i change my client code (Java code using JNDI) to use Context.NONCRITICAL for SortControl, the sorted result is coming fine for small data set (access log shows query as indexed) but result is not sorted for large dataset and also i see the query is now unindexed. I am using only one attribute for sorting. Please help me out what configuration i am missing here.

    Exactly. There is no reason to have the LDAP server sort the
    results during the retrieval.
    Query of Query can be used such as:
    <cfldap name="ldapResults" .....> <!--- Do the LDAP
    query first --->
    <cfquery dbtype="query" name="sortedResults">
    SELECT
    FROM
    ldapResults
    ORDER BY
    sprintcompany
    ,sprintpocrole
    ,sn
    </cfquery>
    Then, use the "sortedResults" query for the rest of your
    processing.

Maybe you are looking for

  • Quicktime movie rendering for time lapse does not work in CS4

    Hey guys, I m trying to render a time lapse video on PS CS4 and the process works well up until the export window. When i go there the first option under file options, quick time export, is unavailable( grayed out). The only available option is Image

  • IC WebClient - http_communication_failure

    Hey guys, I'm stuck on this really annoying problem. We've just upgraded to CRM 5.0 and ever since then we've been getting the same error over and over again when starting up the IC-Webclient. <i>Note The following error text was processed in the sys

  • Namespace not found error when creating data server for xml with namespace

    Hi I tried creating XML data server in ODI with namespace in xml file. I followed the below steps but could not success in creating the dataserver. however when I remove the namespace in xml file I am able to reverse engineer the xml file. 1) Create

  • CRM_IC :: Net Price become zero after EDIT.

    Dear All, I am facing a problem that; in the transaction CRM_IC, when I create a Sale Order with one (or more) line item(s) and providing a valid value in the field Net Price. If we save it, it will get saved successfully. But If I press the EDIT but

  • 5610 help!!

    I juz bought a 5610 & discovered tt despite having saved names n mobile nos. of frens, there's no name reflected when smses come in, i don face prob wif names on in/out-goin calls. I even upgraded to latest software V04.81, no help(*Note: There's no