High CPU utilization when searching on group members\dynamic groups after 8.8 SP8 Patch 6 or higher

  • 7018024
  • 07-Sep-2016
  • 07-Sep-2016

Environment

NetIQ eDirectory 8.8 SP8
NetIQ eDirectory 9.0

Situation

After applying 8.8 SP8 Patch 6 high CPU utilization was observed across all four processors on the servers.  LDAP applications were beginning to fail due to increased response times.

Resolution

There have been some nested group code changes that were made to provide increased performance when searches were against them.  This is leading to increased CPU utilization.

The greater utilization can be alleviated by the manual creation of the following indexes:

       Attribute                    Rule

1. memberQuery             Value
2, groupmembership       Value

This can be accomplished using iManager.  The steps can be found in the eDirectory Admin Guide - eDirectory Management Utilities - Index Manager.