Start up and shutdown of OpenLDAP is slow

This document (7001453) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10 Support Pack 1

Situation

Slow start up and shut down of OpenLDAP server with OpenLDAP 2.3.32

Using syncrepl for replication and BDB for the database

Only the Master OpenLDAP server is experiencing this issue

Resolution

Enable ACL logging and the log will show
"access_allowed: search access to "cn=object,dc=domain,dc=com""entryCSN" requested
root access granted"
For each object in the database.

When OpenLDAP starts it does a database scan on the entryCSN operational attribute on the entire database. While the database is up updates are only written to memory. This is to increase the performance of the database. When it is shutdown the changes/updates are written to the database and read into memory again at startup. To speed up the startup and shutdown times create an “eq” index on the “entryCSN” attribute.

Add the following to index section of the slapd.conf and don't forget to run slapindex when done.

index entryCSN eq

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.