My Oracle Support Banner

ODSEE - After a Failed MODRDN ldapmodify Operations are Slow. (Doc ID 1403735.1)

Last updated on SEPTEMBER 30, 2019

Applies to:

Oracle Directory Server Enterprise Edition - Version 6.0 to [Release 6.0 to 11gR1]
Information in this document applies to any platform.
***Checked for relevance on 18-Dec-2013***


After a failed MODRDN ldapmodify operations are significantly slower.

TESTCASE (reproduced on DS 6.x and
# dsadm -V ..
dsadm : B2011.0517.2251 ZIP

Copyright (c) 2011, Oracle and/or its affiliates. All rights reserved.

[slapd 64-bit]
Oracle Corporation.
Sun-Directory-Server/ B2011.0517.2251 64-bit
ns-slapd : B2011.0517.2251 ZIP
Slapd Library : B2011.0517.2251
Front-End Library : B2011.0517.2251

1. Create a new instance, no changes to caches, indexes, db-home etc....

# dsadm create -p <PORT> -P <SSL_PORT>
Choose the Directory Manager password:
Confirm the Directory Manager password:
Use 'dsadm start '/<INSTALL_PATH>/instances/<DS_INSTANCE>'' to start the instance

2. Start the DS.
# dsadm start /<INSTALL_PATH>/instances/<DS_INSTANCE>/
Directory Server instance '/<INSTALL_PATH>/instances/<DS_INSTANCE>' started:

3. Create a new suffix
# dsconf create-suffix -p <PORT> <SUFFIX>
Certificate "CN=<CERT_NAME>, CN=Directory Server, O=<DOMAIN>"
presented by the server is not trusted.
Type "Y" to accept, "y" to accept just once, "n" to refuse, "d" for more
details: Y
Enter "cn=Directory Manager" password:

4. Enable microsecond logging.

# dsconf set-log-prop -p <PORT> -w /tmp/passwd access
level:default level:acc-timing

5. Import the sample example.ldif

# dsconf import -p <PORT> -w /tmp/passwd
/<INSTALL_PATH>/dsee7/resources/ldif/Example.ldif <SUFFIX>
New data will override existing data of the suffix "<SUFFIX>".
Initialization will have to be performed on replicated suffixes.
Do you want to continue [y/n] ? y
## Index buffering enabled with bucket size 40
## Beginning import job...
## Starting to process and index entries
## Processing file "/<INSTALL_PATH>/dsee7/resources/ldif/Example.ldif"
## Finished scanning file
"/<INSTALL_PATH>/dsee7/resources/ldif/Example.ldif" (160 entries)
## Workers finished; cleaning up...
## Workers cleaned up.
## Cleaning up producer thread...
## Indexing complete.
## Starting numsubordinates attribute generation.
## This may take a while, please wait for further activity reports.
## Numsubordinates attribute generation complete. Flushing caches...
## Closing files...
## Import complete. Processed 160 entries in 4 seconds. (40.00 entries/sec)

Task completed (slapd exit code: 0).

6. Run the following simple MOD

# cat mod-<UID1>.ldif
dn: uid=<UID1>, ou=People, <SUFFIX>
changetype: modify
replace: givenname
givenname: USER

# while : ; do date; time ldapmodify -D "cn=directory manager" -j /tmp/passwd -p <PORT> -a -f ./mod-<UID1>.ldif; done

Wed Nov 30 02:35:31 EST 2011
modifying entry uid=<UID1>, ou=People, <SUFFIX>

real 0m0.015s
user 0m0.005s
sys 0m0.006s
Wed Nov 30 02:35:31 EST 2011
real 0m0.009s
user 0m0.000s
sys 0m0.002s

[30/Nov/2011:02:35:30 -0500] conn=317 op=1 msgId=2 - MOD dn="uid=<UID1>, ou=People, <SUFFIX>"
[30/Nov/2011:02:35:30 -0500] conn=317 op=1 msgId=2 - RESULT err=0 tag=103 nentries=0 etime=0.002780

7. Introduce the slowdown by running the following modrdn

# cat modrdn.ldif
dn: uid=<UID>,ou=people,<SUFFIX>
changetype: modrdn
newrdn: uid=<UID2>
deleteoldrdn: 1
newsuperior: ou=groups,<SUFFIX>

# date; ldapmodify -D "cn=directory manager" -w <PASSWORD> -p <PORT> -a -f
Wed Nov 30 02:38:52 EST 2011
modifying RDN of entry uid=<UID>,ou=people,<SUFFIX> and/or moving
it beneath a new parent

ldap_rename: DSA is unwilling to perform
ldap_rename: additional info: This server is configured to refuse to move entries.

8. The etimes for the MOD in step 5 jumps to 1 second!

Wed Nov 30 02:39:18 EST 2011
modifying entry uid=<UID1>, ou=People, <SUFFIX>

real 0m0.999s
user 0m0.005s
sys 0m0.007s
Wed Nov 30 02:39:19 EST 2011
modifying entry uid=<UID1>, ou=People, <SUFFIX>

real 0m1.001s
user 0m0.005s
sys 0m0.007s
Wed Nov 30 02:39:20 EST 2011

[30/Nov/2011:02:39:18 -0500] conn=4210 op=1 msgId=2 - MOD dn="uid=<UID1>, ou=People, <SUFFIX>"
[30/Nov/2011:02:39:19 -0500] conn=4210 op=1 msgId=2 - RESULT err=0 tag=103 nentries=0 etime=0.987580

9. A restart of the DS restores performance until the next failed MODRDN.




To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.