Subject: Re: [nfsv4] [FedFS] Open LDAP and Windows AD performance

From: James Lentini <[email-masked]>
Date: Tue, 2 Jun 2009 10:45:57 -0400 (EDT)

On Thu, 28 May 2009, Paul Lemahieu wrote:

> Per our FedFS dicussion on LDAP performance and scaling.
> 
> Some performance numbers for Windows 2003 Active Directory with a 100K user
> entry database:
> 
>    * 2K kerberos logon ops/sec
>    * 22K "search base 1 attr" ops/sec
>    * 2 (yes, 2) "search nonindexed 1 attr" ops/sec
> 
> The full report ishere: http://www.microsoft.com/downloads/thankyou.aspx?familyId=52e7c3bd-57
> 0a-475c-96e0-316dc821e3e7&displayLang=en
> 
> The 2 ops/sec for non-indexed searches is pretty dramatic.
> 
> Some performance numbers for a 1M user entry database:
> 
>    * OpenLDAP: 23K authentication ops/sec
>    * Windows AD: 5K authentication ops/sec
>    
> Here's a link to that information:
> 
>    http://www.connexitor.com/blog/pivot/entry.php?id=185
> 
> For our ballpark calculations, we should comfortably expect many thousands
> of lookups per second.
> 
> --Paul

Paul,

Thank you for tracking this information down. The blog entry above is 
about the article I was trying to thinking of on the call last week.

I had also come across this paper from SIGMETRICS 2000 on LDAP 
performance:

 http://www.cse.buffalo.edu/~xwang8/public/paper/ldap_sigmetrics.pdf

The results are older (and not as good) as those in the above studies.

-james