The following topics describe how you can tune Delegated Administrator and related software to improve Delegated Administrator performance:
In addition to following the guidelines described in this appendix, you can improve Directory Server performance by consolidating and reducing the number of default ACIs in the directory. For information, see Appendix E, Consolidating ACIs for Directory Server Performance.
If an organization contains many users, the Delegated Administrator console may take time to display the User list page. If you try to create or edit a user while the page is still loading the existing users, an error occurs. Do not click any buttons or links until the page is ready.
Similarly, it can take time to open the Organization page or Group page if your directory contains many organizations or groups.
If these pages take too long to load, you can set wild-card search properties to a sufficiently low value to allow the pages to load quickly.
Search property for users.
Search property for groups.
Search property for organizations.
The wild-card search property limits are as follows:
Return all results. (Display all users, groups, or organizations.) -1 is the default value.
Do not search. (Display no users, groups, or organizations.)
Return n (the specified number of results).
Open the resource.properties file.
The resource.properties file is located in the following directory:
da-base/data/WEB-INF/classes/sun/comm/cli/server/servlet |
Set the value of jdapi-wildusersearchmaxresults to a low value. For example:
jdapi-wildusersearchmaxresults=50
Alternatively, you can set the value to 0 to display no users. In the Delegated Administrator console, use the Search drop-down list to search for specified users.
Redeploy the edited resource.properties file to the Web container used by the Delegated Administrator server.
Before the change can take effect, you must run the script that deploys the customized resource.properties file to your Web container.
For instructions on how to deploy a customized properties file to a particular Web container, see To Deploy a Customized Configuration File.
Open the resource.properties file.
The resource.properties file is located in the following directory:
da-base/data/WEB-INF/classes/sun/comm/cli/server/servlet |
Set the value of jdapi-groupsmaxsearchresults to a low value. For example:
jdapi-groupsmaxsearchresults=50
Alternatively, you can set the value to 0 to display no groups. In the Delegated Administrator console, use the Search drop-down list to search for specified groups.
Redeploy the edited resource.properties file to the Web container used by the Delegated Administrator server.
Before the change can take effect, you must run the script that deploys the customized resource.properties file to your Web container.
For instructions on how to deploy a customized properties file to a particular Web container, see To Deploy a Customized Configuration File.
Open the resource.properties file.
The resource.properties file is located in the following directory:
da-base/data/WEB-INF/classes/sun/comm/cli/server/servlet |
Set the value of jdapi-wildorgsearchmaxresults to a low value. For example:
jdapi-wildorgsearchmaxresults=10
Alternatively, you can set the value to 0 to display no organizations. In the Delegated Administrator console, use the Search drop-down list to search for specified organizations.
Redeploy the edited resource.properties file to the Web container used by the Delegated Administrator server.
Before the change can take effect, you must run the script that deploys the customized resource.properties file to your Web container.
For instructions on how to deploy a customized properties file to a particular Web container, see To Deploy a Customized Configuration File.
To improve the performance of common Delegated Administrator functions such as displaying pages and performing searches, you can increase the Java Virtual Machine (JVM) heap size used by the Web container to which Delegated Administrator is deployed. When the Web container's JVM heap size is too small, performance can be affected.
The JVM heap size is set by the following JVM option:
-Xmx<n>m |
where <n> is the heap size in megabytes.
Typically, <n> is set to 256m.
The following tasks outline how to set a higher JVM heap size for Web Server and Application Server.
Log in to the Web Server Administration Server.
Under the Java tab, select JVM Options.
Edit the -Xmx256m option.
This option sets the JVM heap size.
Set the -Xmx256m option to a higher value, such as Xmx1024m.
Save the new setting.
See the Sun Java System Web Server Administration Guide and Web Server Performance Tuning, Sizing, and Scaling Guide for more information about using the Web Server Administration Server and setting JVM options.
Log in to the Web Server Administration Server.
Under the Configuration Tasks section, select Edit Java Settings.
Click the JVM Settings tab to display the JVM options.
Edit the -Xmx256m option.
This option sets the JVM heap size.
Set the -Xmx256m option to a higher value, such as Xmx1024m.
Save the new setting.
See the Sun Java System Web Server Administration Guide and Web Server Performance Tuning, Sizing, and Scaling Guide for more information about using the Web Server Administration Server and setting JVM options.
Log in to the Application Server Administration Server.
Navigate to the JVM options.
Edit the -Xmx256m option.
This option sets the JVM heap size.
Set the -Xmx256m option to a higher value, such as Xmx1024m.
Save the new setting.
For more information about using the Application Server Administration Server and setting JVM options, go to the Sun Java System Application Server Documentation Center and select “JVM Advanced Settings.” Alternatively, see “Tuning the Java Runtime System” in the Sun Java System Application Server Enterprise Edition 8.1 2005Q4 Performance Tuning Guide
To improve performance of Delegated Administrator functions such as searching and displaying users, you can increase the threshold for indexes used by Directory Server to search the directory.
When Directory Server searches a large number of LDAP objects, if the threshold is set to a low value, the index might run out of space before the search is completed. The remainder of the search is performed without indexing, which slows down the search operation.
Perform this operation only if you are an experienced Directory Server administrator.
To set the index threshold to a higher value, change the value of the nssldap-allidsthreshold option in the dse.ldif file
This option might be set to a value such as the following:
nssldap-allidsthreshold: 4000 |
Set nssldap-allidsthreshold to a higher value. For example:
nssldap-allidsthreshold: 200000 |
For more information about the All IDs Threshold, see “Managing Indexes” in “Indexing Directory Data” in the Sun Java System Directory Server Administration Guide. For a definition of the nssldap-allidsthreshold option, see “Database Configuration Attributes” in “Server Configuration Reference” in the Sun Java System Directory Server Administration Reference.