[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-directory-users
Subject:    =?utf-8?q?=5B389-users=5D?= Need help to tune 389 DS
From:       wodel youchi <wodel.youchi () gmail ! com>
Date:       2017-02-22 11:27:15
Message-ID: CAJV_UBArX5REU5hLBEXGCLHvgVjsmuw8z4_n7g7GTd+P04EiTg () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

We have a simple installation of 389DS, a master/slave installation.

Our directory server is mainly used with our mail and portal servers for
now.

We did create some custom attributes for our needs.

Here is a simple entry model :































*uid=lastname.firstname,ou=People,dc=domain;dc=tlddn:
uid=lastname.firstname,ou=People,dc=domain,dc=tldou: SUPPORT
TEAMrecruitmentDate: 20030510mailQuota: 2048576000
<%28204%29%20857-6000>teletexTerminalIdentifier: 3053maidenName:
MaindeNameemployeeNumber: 28813gender: FdepartmentNumber: 1121employeeType:
SmailAlternateAddress: f.lastname@domain.tlddisplayName: Lastname
Firstnamemail: lastname.firstname@domain.tldjobTitle: Supervisorsn:
Firstnamecn: LastnameobjectClass: topobjectClass: personobjectClass:
organizationalPersonobjectClass: inetorgpersonobjectClass:
shadowAccountobjectClass: mailrecipientobjectClass:
customprofilemailMessageStore: /var/vmail/lastname.firstnameuid:
lastname.firstnamemailHost: mail.domain.tldtitle: MuserPassword::
e1NIQX02TjBCaXpjcWRkNVJCUXlyVHV6TDlwT1NGK3c9*

*webtelxmail : f.lastname@telex.domain.tld*


We run logconv against our directory Server and we get a pretty long result
file, with some recommendations, but we don't know how proceed, especially
with indexes.

we have many entries like these












*  Unindexed Search #32105 (notes=A)  -  Date/Time:
13/Jan/2017:01:21:49  -  Connection Number:     434118  -  Operation
Number:      74292  -  Etime:                 0  -  Nentries:
0  -  IP Address:            172.16.16.9  -  Search Base:
ou=people,dc=domain,dc=tld  -  Search Scope:          2 (subtree)  -
Search Filter:
(&(null=uid=lastname.lastname,ou=people,dc=domain,dc=tld))  -  Bind
DN:               cn=directory manager*

*Unindexed Search #76240 (notes=A)  -  Date/Time:             *





*13/Jan/2017:00:16:55  -  Connection Number:     433231  -  Operation
Number:      205936  -  Etime:                 0  -  Nentries:
0  -  IP Address:            Unknown_Host  -  Search Base:
ou=people,*

*dc=domain,dc=tld    -  Search Scope:          2 (subtree)  -  Search
Filter:         (&(null=uid=lastname2.firstname2,ou=people,*


*dc=domain,dc=tld))Unindexed Component #1 (notes=U)  -
Date/Time:             *





*13/Jan/2017:00:01:19  -  Connection Number:     433951  -  Operation
Number:      1  -  Etime:                 0  -  Nentries:              0
-  IP Address:            172.16.16.1  -  Search Base:           ou=people,*


*dc=domain,dc=tld  -  Search Scope:          2 (subtree)  -  Search
Filter:         (&(objectclass=*)(uid=pat))  -  Bind DN:
uid=dovecot,**dc=domain,dc=tld*


In the end of the result file we got this :

In the end of the result file we got this :

FDs Taken:                    573
FDs Returned:                 569
Highest FD Taken:             81

Broken Pipes:                 0
Connections Reset By Peer:    0
Resource Unavailable:         235
     -  235  (T1) Idle Timeout Exceeded
Max BER Size Exceeded:        0

Binds:                        4627
Unbinds:                      45
 - LDAP v2 Binds:             24
 - LDAP v3 Binds:             4603
 - AUTOBINDs:                 0
 - SSL Client Binds:          0
 - Failed SSL Client Binds:   0
 - SASL Binds:                0
 - Directory Manager Binds:   4
 - Anonymous Binds:           24
 - Other Binds:               4599



----- Connection Latency Details -----

 (in seconds)        <=1    2    3    4-5    6-10    11-15    >15
 --------------------------------------------------------------------------
 (# of connections)    250    8    3    5    55    4    244

----- Current Open Connection IDs -----

Conn Number:  434505 (172.16.16.8)
Conn Number:  434171 (172.16.16.9)
Conn Number:  434506 (172.16.16.8)
Conn Number:  434301 (172.16.16.9)
Conn Number:  434150 (172.16.16.9)
Conn Number:  434118 (172.16.16.9)
Conn Number:  434507 (172.16.16.8)
Conn Number:  434508 (172.16.16.8)
Conn Number:  434504 (172.16.16.8)


----- Errors -----

err=0                295657    Successful Operations
err=32                  627    No Such Object
err=49                   44    Invalid Credentials (Bad Password)
err=4                    24    Size Limit Exceeded
err=11                    6    Administrative Limit Exceeded (Look Through
Limit)

----- Top 10 Failed Logins ------

12          uid=lastname.firstname,ou=people,dc=domain,dc=tld
12          uid=admin,ou=people,dc=domain,dc=tld
8           uid=lastname10.firstname10,ou=people,dc=domain,dc=tld
4           uid=lastname11.firstname11,ou=people,dc=domain,dc=tld
3           uid=lastname12.firstname12,ou=people,dc=domain,dc=tld
3           uid=lastname13.firstname13,ou=people,dc=domain,dc=tld
2           uid=dakar,ou=people,dc=domain,dc=tld

From the IP address(s) :

32          Unknown_Host
12          172.16.16.1


----- Total Connection Codes -----

B1      289   Bad Ber Tag Encountered
T1      235   Idle Timeout Exceeded
U1       45   Cleanly Closed Connections


----- Top 10 Clients -----

Number of Clients:  4

[1] Client: 172.16.16.8
       308 - Connections
       235 - T1 (Idle Timeout Exceeded)
        68 - B1 (Bad Ber Tag Encountered)

[2] Client: 172.16.16.1
       221 - Connections
       221 - B1 (Bad Ber Tag Encountered)

[3] Client: 172.16.16.14
        24 - Connections
        24 - U1 (Cleanly Closed Connections)

[4] Client: 172.16.16.9
        20 - Connections
        16 - U1 (Cleanly Closed Connections)



----- Top 10 Bind DN's -----

Number of Unique Bind DN's: 368

529             uid=dovecot,dc=domain,dc=tld
242             uid=helpdesk-ventes,ou=people,dc=domain,dc=tld
182             uid=helpdesk,ou=people,dc=domain,dc=tld
161             uid=lastname.firstname,ou=people,dc=domain,dc=tld
122             uid=lastname2.firstname2,ou=people,dc=domain,dc=tld
121             uid=lastname3.firstname3,ou=people,dc=domain,dc=tld
120             uid=lastname4.firstname4,ou=people,dc=domain,dc=tld
119             uid=lastname5.firstname5,ou=people,dc=domain,dc=tld
110             uid=lastname6.firstname6,ou=people,dc=domain,dc=tld
110             uid=lastname7.firstname7,ou=people,dc=domain,dc=tld


----- Top 10 Search Bases -----

Number of Unique Search Bases: 7628

192079          ou=people,dc=domain,dc=tld
352             uid=postmaster,ou=people,dc=domain,dc=tld
254             uid=helpdesk-ventes,ou=people,dc=domain,dc=tld
208             uid=helpdesk,ou=people,dc=domain,dc=tld
173             uid=lastname20.firstname20,ou=people,dc=domain,dc=tld
145             uid=lastname21.firstname21,ou=people,dc=domain,dc=tld
136             uid=lastname22.firstname22,ou=people,dc=domain,dc=tld
133             uid=lastname23.firstname23,ou=people,dc=domain,dc=tld
132             uid=lastname24.firstname24,ou=people,dc=domain,dc=tld
123             uid=lastname25.firstname25,ou=people,dc=domain,dc=tld


----- Top 10 Search Filters -----

Number of Unique Search Filters: 15887

95285           (objectclass=*)
456
(&(|(mail=domain.tld)(mailalternateaddress=domain.tld))(objectclass=inetorgperson))
352             (&(|(mail=postmaster@domain.tld
)(mailalternateaddress=postmaster@domain.tld))(objectclass=inetorgperson))
242             (&(|(mail=helpdesk-ventes@domain.tld
)(mailalternateaddress=helpdesk-ventes@domain.tld
))(objectclass=inetorgperson))
224             (&(|(mail=helpdesk@domain.tld
)(mailalternateaddress=helpdesk@domain.tld))(objectclass=inetorgperson))
161             (&(|(mail=lastname22.firstname22@domain.tld
)(mailalternateaddress=lastname22.firstname22@domain.tld
))(objectclass=inetorgperson))
161             (&(|(mail=lastname10.firstname10@domain.tld
)(mailalternateaddress=lastname10.firstname10@domain.tld
))(objectclass=inetorgperson))
153             (&(|(mail=lastname15.firstname15@domain.tld
)(mailalternateaddress=lastname15.firstname15@domain.tld
))(objectclass=inetorgperson))



----- Top 10 Most Frequent etimes -----

286125          etime=0
10227           etime=1
6               etime=2


----- Top 10 Longest etimes -----

etime=2         6
etime=1         10227
etime=0         286125


----- Top 10 Largest nentries -----

nentries=7622                  12
nentries=13                     1
nentries=10                     1
nentries=6                      1
nentries=1                 194973
nentries=0                  96743


----- Top 10 Most returned nentries -----

194973          nentries=1
96743           nentries=0
12              nentries=7622
1               nentries=13
1               nentries=6
1               nentries=10



----- Top 10 Most Requested Attributes -----

194890      mailQuota
96898       mail
95504       uid
95267       displayName
95267       sn
95261       createTimestamp
95261       creatorsName
95261       employeeType
95261       modifyTimestamp
95261       ou


----- Abandon Request Stats -----

 - UNKNOWN conn=433250 op=NOTFOUND msgid=102278 client=Unknown_Host
 - UNKNOWN conn=433250 op=NOTFOUND msgid=102667 client=Unknown_Host
 - UNKNOWN conn=433250 op=NOTFOUND msgid=89071 client=Unknown_Host
 - UNKNOWN conn=434150 op=NOTFOUND msgid=26399 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=50332 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=54880 client=172.16.16.9
 - UNKNOWN conn=433250 op=NOTFOUND msgid=88929 client=Unknown_Host
 - UNKNOWN conn=434150 op=NOTFOUND msgid=13986 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=21519 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=35708 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=43639 client=172.16.16.9
 - UNKNOWN conn=434150 op=NOTFOUND msgid=44806 client=172.16.16.9


----- Recommendations -----

 1.  You have unindexed searches, this can be caused from a search on an
unindexed attribute, or your returned results exceeded the
allidsthreshold.  Unindexed searches are not recommended. To refuse
unindexed searches, switch 'nsslapd-require-index' to 'on' under your
database entry (e.g. cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).

 2.  You have unindexed components, this can be caused from a search on an
unindexed attribute, or your returned results exceeded the
allidsthreshold.  Unindexed components are not recommended. To refuse
unindexed searches, switch 'nsslapd-require-index' to 'on' under your
database entry (e.g. cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).

 3.  You have some connections that are are being closed by the idletimeout
setting. You may want to increase the idletimeout if it is set low.

 4.  You have a significant difference between binds and unbinds.  You may
want to investigate this difference.

 5.  You have more abnormal connection codes than cleanly closed
connections.  You may want to investigate this difference.

Cleaning up temp files...
Done.

Any advice on how to interpret all this data?
Can these problems slow users connection?
Could someone point us to how improve our directory server.

If you need more info let me know.

Thanks in advance.

[Attachment #5 (text/html)]

<div dir="ltr"><div><div><div><div>Hi,<br><br></div><div>We have a simple \
installation of 389DS, a master/slave installation.<br><br></div><div>Our directory \
server is mainly used with our mail and portal servers for now.<br><br></div><div>We \
did create some custom attributes for our needs.<br><br></div><div>Here is a simple \
entry model :<br></div><div><br><b>uid=lastname.firstname,ou=<wbr>People,dc=domain;dc=tld<br><br>dn: \
uid=lastname.firstname,ou=<wbr>People,dc=domain,dc=tld<br>ou: SUPPORT TEAM<br><span \
style="color:rgb(0,0,255)"><span \
style="background-color:rgb(255,255,255)">recruitmentDate: \
20030510</span></span><br>mailQuota: <a href="tel:%28204%29%20857-6000" \
value="+12048576000" target="_blank">2048576000</a><br>teletexTerminalIdentifier: \
3053<br><span style="color:rgb(0,0,255)">maidenName: MaindeName<span \
style="background-color:rgb(255,255,255)"><span></span></span></span><br>employeeNumber: \
28813<br><span style="color:rgb(0,0,255)">gender: F</span><br>departmentNumber: \
1121<br>employeeType: S<br>mailAlternateAddress: \
f.lastname@domain.tld<br>displayName: Lastname Firstname<br>mail: \
lastname.firstname@domain.tld<br>jobTitle: Supervisor<br>sn: Firstname<br>cn: \
Lastname<br>objectClass: top<br>objectClass: person<br>objectClass: \
organizationalPerson<br>objectClass: inetorgperson<br>objectClass: \
shadowAccount<br>objectClass: mailrecipient<br>objectClass: \
customprofile<br>mailMessageStore: /var/vmail/lastname.firstname<br>uid: \
lastname.firstname<br>mailHost: mail.domain.tld<br>title: M<br>userPassword:: \
e1NIQX02TjBCaXpjcWRkNVJCUXlyVH<wbr>V6TDlwT1NGK3c9<br></b></div><div><b><span \
style="color:rgb(0,0,255)">webtelxmail : \
f.lastname@telex.domain.tld</span><br></b></div><div><br></div><br></div>We run \
logconv against our directory Server and we get a pretty long result file, with some \
recommendations, but we don&#39;t know how proceed, especially with \
indexes.<br><br></div>we have many entries like these <br><br><b>  Unindexed Search \
#32105 (notes=A)<br>  -  Date/Time:             13/Jan/2017:01:21:49<br>  -  \
Connection Number:     434118<br>  -  Operation Number:      74292<br>  -  Etime:     \
0<br>  -  Nentries:              0<br>  -  IP Address:            172.16.16.9<br>  -  \
Search Base:           ou=people,dc=domain,dc=tld<br>  -  Search Scope:          2 \
(subtree)<br>  -  Search Filter:         \
(&amp;(null=uid=lastname.lastname,ou=people,dc=domain,dc=tld))<br>  -  Bind DN:       \
cn=directory manager<br></b><br><b>Unindexed Search #76240 (notes=A)<br>  -  \
Date/Time:             </b><b><b>13/Jan/2017</b>:00:16:55<br>  -  Connection Number:  \
433231<br>  -  Operation Number:      205936<br>  -  Etime:                 0<br>  -  \
Nentries:              0<br>  -  IP Address:            Unknown_Host<br>  -  Search \
Base:           ou=people,</b><b><b>dc=domain,dc=tld</b>  <br>  -  Search Scope:      \
2 (subtree)<br>  -  Search Filter:         \
(&amp;(null=uid=lastname2.firstname2,ou=people,</b><b><b>dc=domain,dc=tld</b>))<br><br>Unindexed \
Component #1 (notes=U)<br>  -  Date/Time:             \
</b><b><b>13/Jan/2017</b>:00:01:19<br>  -  Connection Number:     433951<br>  -  \
Operation Number:      1<br>  -  Etime:                 0<br>  -  Nentries:           \
0<br>  -  IP Address:            172.16.16.1<br>  -  Search Base:           \
ou=people,</b><b><b>dc=domain,dc=tld</b><br>  -  Search Scope:          2 \
(subtree)<br>  -  Search Filter:         (&amp;(objectclass=*)(uid=pat))<br>  -  Bind \
DN:               uid=dovecot,</b><b><b>dc=domain,dc=tld</b></b><br><br><br></div>In \
the end of the result file we got this :<br><br><div><div>In the end of the result \
file we got this :<br><br>FDs Taken:                    573<br>FDs Returned:          \
569<br>Highest FD Taken:             81<br><br>Broken Pipes:                 \
0<br>Connections Reset By Peer:    0<br>Resource Unavailable:         235<br>     -  \
235  (T1) Idle Timeout Exceeded                  <br>Max BER Size Exceeded:        \
0<br><br>Binds:                        4627<br>Unbinds:                      45<br> - \
LDAP v2 Binds:             24<br> - LDAP v3 Binds:             4603<br> - AUTOBINDs:  \
0<br> - SSL Client Binds:          0<br> - Failed SSL Client Binds:   0<br> - SASL \
Binds:                0<br> - Directory Manager Binds:   4<br> - Anonymous Binds:     \
24<br> - Other Binds:               4599<br><br><br><br>----- Connection Latency \
Details -----<br><br> (in seconds)        &lt;=1    2    3    4-5    6-10    11-15    \
&gt;15<br> --------------------------------------------------------------------------<br> \
(# of connections)    250    8    3    5    55    4    244   <br><br>----- Current \
Open Connection IDs -----<br><br>Conn Number:  434505 (172.16.16.8)<br>Conn Number:  \
434171 (172.16.16.9)<br>Conn Number:  434506 (172.16.16.8)<br>Conn Number:  434301 \
(172.16.16.9)<br>Conn Number:  434150 (172.16.16.9)<br>Conn Number:  434118 \
(172.16.16.9)<br>Conn Number:  434507 (172.16.16.8)<br>Conn Number:  434508 \
(172.16.16.8)<br>Conn Number:  434504 (172.16.16.8)<br><br><br>----- Errors \
-----<br><br>err=0                295657    Successful Operations  <br>err=32         \
627    No Such Object         <br>err=49                   44    Invalid Credentials \
(Bad Password)<br>err=4                    24    Size Limit Exceeded    <br>err=11    \
6    Administrative Limit Exceeded (Look Through Limit)<br><br>----- Top 10 Failed \
Logins ------<br><br>12          \
uid=lastname.firstname,ou=people,dc=domain,dc=tld<br>12          \
uid=admin,ou=people,dc=domain,dc=tld<br>8           \
uid=lastname10.firstname10,ou=people,dc=domain,dc=tld<br>4           \
uid=lastname11.firstname11,ou=people,dc=domain,dc=tld<br>3           \
uid=lastname12.firstname12,ou=people,dc=domain,dc=tld<br>3           \
uid=lastname13.firstname13,ou=people,dc=domain,dc=tld<br>2           \
uid=dakar,ou=people,dc=domain,dc=tld<br><br>From the IP address(s) :<br><br>32        \
Unknown_Host   <br>12          172.16.16.1    <br><br><br>----- Total Connection \
Codes -----<br><br>B1      289   Bad Ber Tag Encountered                <br>T1      \
235   Idle Timeout Exceeded                  <br>U1       45   Cleanly Closed \
Connections             <br><br><br>----- Top 10 Clients -----<br><br>Number of \
Clients:  4<br><br>[1] Client: 172.16.16.8<br>       308 - Connections<br>       235 \
- T1 (Idle Timeout Exceeded)<br>        68 - B1 (Bad Ber Tag Encountered)<br><br>[2] \
Client: 172.16.16.1<br>       221 - Connections<br>       221 - B1 (Bad Ber Tag \
Encountered)<br><br>[3] Client: 172.16.16.14<br>        24 - Connections<br>        \
24 - U1 (Cleanly Closed Connections)<br><br>[4] Client: 172.16.16.9<br>        20 - \
Connections<br>        16 - U1 (Cleanly Closed Connections)<br><br><br><br>----- Top \
10 Bind DN&#39;s -----<br><br>Number of Unique Bind DN&#39;s: 368<br><br>529          \
uid=dovecot,dc=domain,dc=tld        <br>242             \
uid=helpdesk-ventes,ou=people,dc=domain,dc=tld<br>182             \
uid=helpdesk,ou=people,dc=domain,dc=tld<br>161             \
uid=lastname.firstname,ou=people,dc=domain,dc=tld<br>122             \
uid=lastname2.firstname2,ou=people,dc=domain,dc=tld<br>121             \
uid=lastname3.firstname3,ou=people,dc=domain,dc=tld<br>120             \
uid=lastname4.firstname4,ou=people,dc=domain,dc=tld<br>119             \
uid=lastname5.firstname5,ou=people,dc=domain,dc=tld<br>110             \
uid=lastname6.firstname6,ou=people,dc=domain,dc=tld<br>110             \
uid=lastname7.firstname7,ou=people,dc=domain,dc=tld<br><br><br>----- Top 10 Search \
Bases -----<br><br>Number of Unique Search Bases: 7628<br><br>192079          \
ou=people,dc=domain,dc=tld          <br>352             \
uid=postmaster,ou=people,dc=domain,dc=tld<br>254             \
uid=helpdesk-ventes,ou=people,dc=domain,dc=tld<br>208             \
uid=helpdesk,ou=people,dc=domain,dc=tld<br>173             \
uid=lastname20.firstname20,ou=people,dc=domain,dc=tld<br>145             \
uid=lastname21.firstname21,ou=people,dc=domain,dc=tld<br>136             \
uid=lastname22.firstname22,ou=people,dc=domain,dc=tld<br>133             \
uid=lastname23.firstname23,ou=people,dc=domain,dc=tld<br>132             \
uid=lastname24.firstname24,ou=people,dc=domain,dc=tld<br>123             \
uid=lastname25.firstname25,ou=people,dc=domain,dc=tld<br><br><br>----- Top 10 Search \
Filters -----<br><br>Number of Unique Search Filters: 15887<br><br>95285           \
(objectclass=*)                        <br>456             \
(&amp;(|(mail=domain.tld)(mailalternateaddress=domain.tld))(objectclass=inetorgperson))<br>352 \
(&amp;(|(mail=postmaster@domain.tld)(mailalternateaddress=postmaster@domain.tld))(objectclass=inetorgperson))<br>242 \
(&amp;(|(mail=helpdesk-ventes@domain.tld)(mailalternateaddress=helpdesk-ventes@domain.tld))(objectclass=inetorgperson))<br>224 \
(&amp;(|(mail=helpdesk@domain.tld)(mailalternateaddress=helpdesk@domain.tld))(objectclass=inetorgperson))<br>161 \
(&amp;(|(mail=lastname22.firstname22@domain.tld)(mailalternateaddress=lastname22.firstname22@domain.tld))(objectclass=inetorgperson))<br>161 \
(&amp;(|(mail=lastname10.firstname10@domain.tld)(mailalternateaddress=lastname10.firstname10@domain.tld))(objectclass=inetorgperson))<br>153 \
(&amp;(|(mail=lastname15.firstname15@domain.tld)(mailalternateaddress=lastname15.firstname15@domain.tld))(objectclass=inetorgperson))<br><br><br><br>----- \
Top 10 Most Frequent etimes -----<br><br>286125          etime=0    <br>10227         \
etime=1    <br>6               etime=2    <br><br><br>----- Top 10 Longest etimes \
-----<br><br>etime=2         6        <br>etime=1         10227    <br>etime=0        \
286125   <br><br><br>----- Top 10 Largest nentries -----<br><br>nentries=7622         \
12<br>nentries=13                     1<br>nentries=10                     \
1<br>nentries=6                      1<br>nentries=1                 \
194973<br>nentries=0                  96743<br><br><br>----- Top 10 Most returned \
nentries -----<br><br>194973          nentries=1   <br>96743           nentries=0   \
<br>12              nentries=7622<br>1               nentries=13  <br>1               \
nentries=6   <br>1               nentries=10  <br><br><br><br>----- Top 10 Most \
Requested Attributes -----<br><br>194890      mailQuota         <br>96898       mail  \
<br>95504       uid               <br>95267       displayName       <br>95267       \
sn                <br>95261       createTimestamp   <br>95261       creatorsName      \
<br>95261       employeeType      <br>95261       modifyTimestamp   <br>95261       \
ou                <br><br><br>----- Abandon Request Stats -----<br><br> - UNKNOWN \
conn=433250 op=NOTFOUND msgid=102278 client=Unknown_Host<br> - UNKNOWN conn=433250 \
op=NOTFOUND msgid=102667 client=Unknown_Host<br> - UNKNOWN conn=433250 op=NOTFOUND \
msgid=89071 client=Unknown_Host<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=26399 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=50332 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=54880 \
client=172.16.16.9<br> - UNKNOWN conn=433250 op=NOTFOUND msgid=88929 \
client=Unknown_Host<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=13986 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=21519 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=35708 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=43639 \
client=172.16.16.9<br> - UNKNOWN conn=434150 op=NOTFOUND msgid=44806 \
client=172.16.16.9<br><br><br>----- Recommendations -----<br><br> 1.  You have \
unindexed searches, this can be caused from a search on an unindexed attribute, or \
your returned results exceeded the allidsthreshold.  Unindexed searches are not \
recommended. To refuse unindexed searches, switch &#39;nsslapd-require-index&#39; to \
&#39;on&#39; under your database entry (e.g. cn=UserRoot,cn=ldbm \
database,cn=plugins,cn=config).<br><br> 2.  You have unindexed components, this can \
be caused from a search on an unindexed attribute, or your returned results exceeded \
the allidsthreshold.  Unindexed components are not recommended. To refuse unindexed \
searches, switch &#39;nsslapd-require-index&#39; to &#39;on&#39; under your database \
entry (e.g. cn=UserRoot,cn=ldbm database,cn=plugins,cn=config).<br><br> 3.  You have \
some connections that are are being closed by the idletimeout setting. You may want \
to increase the idletimeout if it is set low.<br><br> 4.  You have a significant \
difference between binds and unbinds.  You may want to investigate this \
difference.<br><br> 5.  You have more abnormal connection codes than cleanly closed \
connections.  You may want to investigate this difference.<br><br>Cleaning up temp \
files...<br>Done.<br><br></div><div>Any advice on how to interpret all this data? \
<br></div><div>Can these problems slow users connection?<br></div><div>Could someone \
point us to how improve our directory server.<br></div><div><br></div><div>If you \
need more info let me know.<br></div><div><div><br>Thanks in \
advance.<br></div></div></div></div>


[Attachment #6 (text/plain)]

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic