Skip to main content

Performance Tuning for IBM Security Directory Server

An IBM Redpaper publication


Published on 03 April 2014

  1. .EPUB (1.2 MB)
  2. .PDF (5.5 MB)

Apple BooksGoogle Play Books

Share this page:   

ISBN-10: 0738453692
ISBN-13: 9780738453699
IBM Form #: REDP-4258-01

Authors: Annemarie Fitterer, Dave Bachmann, David Butler, Ben Matteson, Ramamohan T. Reddy, Sujay Shinde and Rick Smith

    menu icon


    In today’s highly connected world, directory servers are the IT cornerstone of many businesses. These components of the corporate infrastructure are the foundation of authentication systems for internal and, more commonly, external user populations. Managing a directory server with several hundred internal users is not all that difficult. However, managing a directory server with several million external users in all 24 time zones throughout the world is a much more daunting task.

    IBM® Security Directory Server software can handle millions of entries, given the right architecture, configuration, and performance tuning. However, that tuning can differ greatly from tuning for a smaller server with only a few hundred thousand entries. Managing and tuning a directory server of this size requires a change in mindset. Tuning and performance must be a focus even before the hardware is ordered. A proactive approach must be taken after installation also, including the pretuning steps to better interface with other products to make installations and migrations successful, and then regular maintenance to keep the directory running smoothly.

    This IBM Redbooks® publication is the accumulation of lessons learned in many different real-world environments, including a 24-server fault tolerant configuration with more than 300 million entries. The authors pooled their knowledge and resources to provide the most comprehensive performance view possible, from hardware to software, sort heaps to buffer pools, and table cardinalities.

    In large directory server deployments, use this document as a guide for how to get the right fit for your environment.

    Table of Contents

    Chapter 1. Service level objectives and agreements

    Chapter 2. Designing your directory for optimal performance

    Chapter 3. Time to do a health check

    Chapter 4. Tips for tuning DB2 performance

    Chapter 5. DB2 settings related to LDAP


    Chapter 7. Tools and scripts

    Chapter 8. Why you must use runstats

    Chapter 9. When and how to run reorg

    Chapter 10. LDAP searches and slow operations

    Chapter 11. Indexes and direct I/O operations

    Chapter 12. Disk striping and RAID

    Chapter 13. Distributed directory

    Chapter 14. LDAP replication information

    Chapter 15. Adding a new LDAP server to an existing enclave

    Appendix A. Special operating system tuning for IBM Directory Server

    Appendix B. How to apply fix packs to an LDAP server

    Appendix C. IBM DB2 UDB concepts and definitions

    Appendix D. DB2 UDB quick reference guide

    Appendix E. Directory Server backup and restore methods

    Appendix F. Checklists

    Appendix G. Additional material


    Others who read this also read