[Pkg-openldap-devel] OpenLDAP 2.3.20 "stable" (fwd)

Quanah Gibson-Mount quanah at stanford.edu
Tue Feb 28 22:42:28 UTC 2006



--On Tuesday, February 28, 2006 11:12 PM +0100 Matthijs Mohlmann 
<matthijs at cacholong.nl> wrote:



>> The database configuration parameters must appear *after* the "database"
>> directive, as DB_CONFIG files are 'per backend'.
>>
> I placed them now after the "database bdb" parameter. But still it
> complains about "No DB_CONFIG file found in directory /var/lib/ldap"
>
> And if I strace slapadd then I see that it tries to open
> /var/lib/ldap/DB_CONFIG, so it seems to me that there is more that I
> need to set, or there is something at compile time wrong.


Hm, it created a DB_CONFIG file for me:

helpus2:/db# pwd
/db
helpus2:/db# ls -l
total 9
-rw-r--r-- 1 root root  153 Sep  2 18:34 DB_CONFIG.tmp
drwx------ 2 root root 8192 Sep 16  2004 lost+found/


helpus2:/tmp/q/ldif# time slapadd -q -l 10k-peons.ldif
43.69u 0.71s 0:46.40 95.6%


helpus2:/db# ls -l
total 47013
-rw-r--r-- 1 root root       97 Feb 28 14:34 DB_CONFIG



My slapd.conf has:

database        bdb
shm_key         5
suffix          "dc=stanford,dc=edu"
rootdn          "dc=stanford,dc=edu"

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw         XXXXXXXXXXXX
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory       /db

dbconfig set_cachesize 0 402653184 0
dbconfig set_lg_regionmax 262144
dbconfig set_lg_bsize 2097152
dbconfig set_lg_dir /var/log/bdb



Note that I put the dbconfig lines after the "directory" statement as well.

>>
> So an initial value of 1,000 to 1,500 would be ok ?

1,000 is the default value for all of these.  The defaults really should be 
okay unless the individual has a very very large number of indices (It took 
us 2 years to get to the point of having to up our locker count).

I read over the initial bug report, and I'm not really convinced that there 
was enough data gathered to support going to 5k lockers to resolve the 
reported problems.  We could however bump them all up to 1500 with some 
notes somewhere on how to further fine-tune the locking (which is provided 
in my previous email ;) ).

--Quanah


--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html



More information about the Pkg-openldap-devel mailing list