OUD 11g Performance Issues with Ismemberof Searches Due to Insufficient FIFO Entry Cache Memory Settings

(Doc ID 2220959.1)

Last updated on FEBRUARY 02, 2018

Applies to:

Oracle Unified Directory - Version 11.1.2.2.2 and later
Information in this document applies to any platform.

Symptoms

Searches that request the ismemberof attribute or reference it in the search filter are taking a long time to return results.  For example...

dn: uid=testuser,cn=users,dc=example,dc=com
isMemberof: <truncated>
isMemberof: <truncated>

real 0m28.577s
user 0m1.641s
sys 0m0.054s

[19/Oct/2016:06:56:38 -0600] CONNECT conn=2283 from=127.0.0.1:17221 to=127.0.0.1:2636 protocol=LDAPS
[19/Oct/2016:06:56:38 -0600] BIND REQ conn=2283 op=0 msgID=1 type=SIMPLE dn="cn=directory manager"
[19/Oct/2016:06:56:38 -0600] BIND RES conn=2283 op=0 msgID=1 result=0 authDN="cn=Directory Manager,cn=Root DNs,cn=config" etime=1
[19/Oct/2016:06:56:38 -0600] SEARCH REQ conn=2283 op=1 msgID=2 base="cn=users,dc=example,dc=com" scope=sub filter="(uid=testuser)" attrs="isMemberof"
[19/Oct/2016:06:57:06 -0600] SEARCH RES conn=2283 op=1 msgID=2 result=0 nentries=1 etime=27546
[19/Oct/2016:06:57:06 -0600] UNBIND REQ conn=2283 op=2 msgID=3
[19/Oct/2016:06:57:06 -0600] DISCONNECT conn=2283 reason="Client Disconnect"

[18/Oct/2016:14:30:43 -0600] SEARCH REQ conn=5026 op=1 msgID=2 base="cn=users,dc=example,dc=com" scope=sub filter="(&(isMemberOf=cn=store.managers.static,cn=groups,dc=example,dc=com)(testDivision=35))" attrs="testDistrict,testFacilityCode"
[18/Oct/2016:14:31:18 -0600] SEARCH RES conn=5026 op=1 msgID=2 result=0 nentries=130 etime=35347

[18/Oct/2016:14:27:09 -0600] SEARCH REQ conn=4980 op=1 msgID=2 base="cn=users,dc=example,dc=com" scope=sub filter="(isMemberOf=cn=store.managers.static,cn=groups,dc=example,dc=com)" attrs="testDistrict,testFacilityCode"
[18/Oct/2016:14:27:30 -0600] SEARCH RES conn=4980 op=1 msgID=2 result=0 nentries=1601 etime=21583

[18/Oct/2016:14:28:12 -0600] SEARCH REQ conn=4992 op=1 msgID=2 base="cn=users,dc=example,dc=com" scope=sub filter="(testDivision=35)" attrs="testDistrict,testFacilityCode"
[18/Oct/2016:14:28:18 -0600] SEARCH RES conn=4992 op=1 msgID=2 result=0 nentries=672 etime=5668

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms