The Directory Server uses indexes to improve database search performance and to provide consistent search rates regardless of the number of database objects stored in the directory information tree (DIT).
When the index keys have reached the default limit of 4000, rebuild the indexes
using the rebuild-index tool.
$ bin/rebuild-index --baseDN dc=example,dc=com --index objectclass
For Directory Server environment directories containing more than 4000
groups with the same structural object class, such as more than 4000
groupOfEntriesentries, or 4000
groupOfURLsentries, increase the index entry limit for the
objectClassattribute so that it has a value larger than the maximum number of group entries of each type by setting the
index-entry-limitproperty in the command line.Note:
For most Directory Server environments, the default index entry limit value of 4000 entries is sufficient. However, group-related processing might be necessary to increase the index entry limit.
$ bin/dsconfig set-local-db-index-prop --backend-name userRoot \ --index-name objectClass --set index-entry-limit:175000
As an alternative, create a separate backend to hold these group entries so that an
unindexed search in that backend yields primarily group entries.
If you make no changes, then the internal search performed at startup to identify all groups and any user searches looking for groups of a given type can be expensive.
For directories in which any single user is be a member of more than 4000 static
groups of the same type, increase the index entry limit for the
uniqueMemberattribute to a value larger than the maximum number of groups in which any user is a member.Note:
If you do not increase the limit, searches to retrieve the set of all static groups in which the user is a member can be unindexed and therefore expensive.