Re: Slow LDA Queries

Emilio, Few thoughts: o Is the call syntax you're using for ldap_read() correct? The online manual page describes the second parameter as being the base dn, you're passing the user's username. ( getenv("REMOTE_USER")). I'm surprised that this code works. o The comparisons you're making: Are they comparing similar LDAP searches. There are issues that may not involve PHP at all that could be the cause of you're performance issue. For example, you're search could find all entries with a cn attribute at the base dn. This could potentially be a large number of entries. Also, if you search for something and the attributes you reference in your search filter are not indexed performance will degrade linearly as you add more entries to your directory. o Session Caching. At CommNav, we've had good success with this strategy. We store quite a bit of information in the users session. It's not uncommon for our user sessions to grow to above 100Kb, and I've seen them as big as 300Kb. Retrieving data from the session (i.e. the unserialize() function) is much less expensive then going to LDAP for every hit to the web app. Since these thoughts are not related to PHP, you can feel free to contact me off-list to discuss further. Andy On Sat, Aug 18, 2001 at 05:07:26PM -0400, Emilio Panighetti wrote: > I have OpenLDAP and PHP 4.0.4p1 on a RedHat 7.1 (plain distribution, didn't > recompile anything, and I use MOD_LDAP to authenticate users to an intranet > site. I want PHP pages to show the real username so I have this function I > call when I want to know the username. > > the mod_ldap queries and ldap queries from a Perl CGI return very fast. On > Perl I don't notice an performance issue (with less than a couple > queries/second), but each query using PHP takes about two full seconds (or > more). I did a workaround keeping the result on a session variable, but it's > still slow every time I call this function. > mod_ldap stores the user's dn on the REMOTE_USER environment variable. > > Here's the function. I don't know how to make it faster. > > Thanks, > Emilio Panighetti > > <?php > // Retrieves user's real name from LDAP > function ldapcnsearch() > { > $s_ldapserver = "localhost"; > $s_ldapport = 389; > $ds = ldap_connect( "ldap://".$s_ldapserver.":".$s_ldapport ); > ldap_set_option( $ds, LDAP_OPT_PROTOCOL_VERSION, 3); > $qar[] = "cn"; > if ( $ds ) { > $r = ldap_bind( $ds ); > $sr = ldap_read( $ds, getenv( "REMOTE_USER" ), "cn=*", $qar, 0, 1, > 1 ); > $info = ldap_get_entries($ds, $sr); > $s_RealName = $info[0]["cn"][0]; > ldap_close( $ds ); > return( $s_RealName ); > } > } > ?> > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > -- -------------------------------------------------- Andrew Libby Director of Technology CommNav, Inc alibby@commnav.com