This bug has been copied from bug #1458536 and has been proposed to be backported to 7.4 z-stream (EUS).
Build tested: 389-ds-base-1.3.6.1-21.el7_4.x86_64 My testing server with 32Gb RAM was configured with the following settings: (default settings) nsslapd-idlistscanlimit: 4000 nsslapd-dbcachesize: 536870912 nsslapd-cachememsize: 2818572288 I increased ndn-cache-max-size: nsslapd-ndn-cache-max-size: 2097152000 Directory contains 1 group with 10k members, unindexed component (description). I see 4-5x increase in search rate: ldclt -D 'cn=Directory Manager' -w Secret123 -e esearch,random -r0 -R99999 -f "(&(description=*)(objectClass=groupOfUniqueNames)(uniqueMember=uid=uXXXXXX,ou=People,dc=example,dc=com))" 389-ds-base-1.3.6.1-19.el7_4.x86_64 (without the fix): ldclt[3603]: Average rate: 284.70/thr ( 284.70/sec), total: 2847 389-ds-base-1.3.6.1-21.el7_4.x86_64 ldclt[3787]: Average rate: 1312.50/thr (1312.50/sec), total: 13125 Marking as VERIFIED.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2932