389-DS poor performance retrieving groups

[ghiureai <isabella.ghiurea@xxxxxxxxxxxxxx>]

We are seeing poor performance from LDAP retrieving 2500-4500 entries compare with one of our regular RDBMS , here is bellow the result for a ldapsearch.
We are questioning if for general cn=(.*..) search string , LDAP has to run  a round trip for each  subset result entry ?

What cfg needs tuned to  see some performance improvements beside  cache mem size ?

ldapsearch -x -s one -H  -b 'ou=Groups,ou=ds,dc=cxxx,dc=net' -W -D 'uid=xx,ou=Users,ou=ds,dc=cxxxr,dc=net' 'cn=*MT*' 'cn, nsaccountlock'

# search result
search: 2
result: 0 Success

# numResponses: 2608
# numEntries: 2607

real    0m19.284s
user    0m0.040s
sys    0m0.052s

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users