Yes. Many rules are groupdn based, sometimes with multiple rules where the dn
must be in some groups but not in others. And some of the groups have
50,000-100,000+ members.
Breaking out the groupdn checks into something very simple did not change the
performance at all. Changing all the targ
On 02/28/2014 12:46 PM, Riss Nicolas wrote:
Hi,
We are making some test in order to synchronize 389 Directory with an
Active Directory. We don’t install pass sync because we need only to
synchronize password from the 389 Directory instance. Everything works
well, but when we analyze the user
Hi,
We are making some test in order to synchronize 389 Directory with an Active
Directory. We don't install pass sync because we need only to synchronize
password from the 389 Directory instance. Everything works well, but when we
analyze the user on Active Directory that were synchronized fro
On 02/28/2014 01:31 AM, Rich Megginson wrote:
On 02/27/2014 05:06 PM, Russell Beall wrote:
Thanks again for your comments on this.
I tried an alternate approach in which I deleted a number of relevant
indexes that theoretically should be needed all across the ACIs. I
was shocked to find out