Getting the indexes right for OpenLDAP when using NSS
I recently deployed a Linux system which used the libnss-ldap module to get its passwd and group information. This all worked fine except group lookups (in particular when logging in) which were extremely slow. We have about 600 groups in our directory, which isn’t massive, but is more than the average system. Clearly this wasn’t right. Initially I tried nscd, …
