By Marco Milo on May 31, 2010
Sometimes ACIs evaluation on large (static) groups can play a significant role in Directory Server performances, especially when there are applications that makes massive and frequent queries to evaluate group membership.
Directory Server (since 5.2patch3) has a nice feature to handle the behavior of these queries, since ACIs are generally small instructions, they are cached into the for a faster access... but to avoid having too much space
maximum number of
members in a group during acl evaluation ( there is a parameter for that
(forgot which one but I could search )
acl would be rejected and not kept in cache in that case ...