Service manual

Using Available System Resources
Chapter 9 Managing Use of Other Resources 155
Refer to the Sun ONE Directory Server Reference Manual for details concerning
individual configuration attributes.
Managing Access Control
Directory Server now offers performance and scalability improvements for Access
Control Instructions (ACIs) such as bettermemory management and support for
macro ACIs. Improvements notwithstanding, Directory Serveruses significant
system resources to evaluate complex ACIs. Extensive use of complex ACIs can
therefore negatively impact performance.
Macro ACIs help you limit the number of ACIs used. By limiting the number of
ACIs, you render access control easier to manage and reduce the load on the
system. Macros are placeholders that represent a DN, or a portion of a DN, in an
ACI.AmacrocanbeusedinanACItarget,inanACIbindrule,orinboth.When
Directory Server receives a request, it checks which ACI macros match against the
nsslapd-threadnumber Sets the number of threads Directory Server uses.
Consider adjusting the value of this attribute if any of the following
are true:
• Client applications perform many time-consuming operations
such as updates or complex searches simultaneously.
• Directory Server supports many simultaneous clientconnections.
• Directory Server handles more than 5,000,000 entries.
Multiprocessor systems can sustain larger thread pools than single
processor systems. As a first estimate when optimizing the value of
this attribute, use two times the number of processors or 20 + number
of simultaneous updates. Consider also adjusting the maximum
number of threads per client connection,
nsslapd-maxthreadsperconn, as discussed in Table 9-1. The
maximum number of these threads handling client connections
cannot exceed the maximum number of file descriptors available on
the system. In some cases, it may prove useful to reduce, rather than
increase, the value of this attribute.
Verify estimates through empirical testing. Results depend not only
on the particular deployment situation but also on the underlying
system.
Table 9-2 Tuning Recommendations for Configuring Use of System Resources (Continued)
Attribute (on dn: cn=config) Short Description and Tuning Recommendations