•Any HP Integrity server architecture with an Intel® Itanium 2 processor or Intel® Itanium 2 dual core processor.

When correctly tuned, the eventual performance bottleneck will be CPU.

•At least 256 MB of memory. However, for best performance on large directories, plan for 512 MB to 4GB or more of RAM. As an example, if your directory contains 250K entries, where the average entry size (in the entry cache) is 3860 bytes, and if your directory server only needs to support exact search requests on the “cn” attribute, have at least 2.5 GB of memory available for the directory server to cache all the information needed.

•Approximately 251 MB of disk space for a minimal installation (without loading any user data). For production systems, plan for at least 2 GB to support the product binaries, databases, and log files (log files require 1 GB disk space by default). As an example, for a directory instance with 250K entries with the average entry size on disk being 700 bytes, a minimum of 0.9 GB disk space is required for database, default index files, and minimum logging (access log is turned off).

System parameter tuning

HP recommends Update 8 (March 2011) or later of the HP-UX 11i v3 operating system, which introduces improvements to the pthread library that stabilize and boost performance. HP recommends the following guidelines for tuning the operating system:

•The MallocNextGen software (a relatively new implementation of the user space memory allocator) is installed for improved heap memory performance. It is available for download from the HP Software Depot website at:

http://www.hp.com/go/softwaredepot (search for “MallocNextGen”)

After you install MallocNextGen on the HP-UX system, enable HP-UX Directory Server to use MallocNextGen by adding the following line in /etc/opt/dirsrv/config/dirsrv:

export LD_PRELOAD=/usr/lib/hpux64/libmallocng.so

The MallocNextGen software does not require tuning; once loaded, it tunes itself.

•The pthread tuning environment variable PTHREAD_FORCE_SCOPE_SYSTEM is set to 1 to force the 1x1 thread model. The 1x1 threads generally perform better than MxN threads. Our testing shows that 1x1 threads perform best for HPDS.

Set the PTHREAD_FORCE_SCOPE_SYSTEM environmental variable by adding the following line to /etc/opt/dirsrv/config/dirsrv:

export PTHREAD_FORCE_SCOPE_SYSTEM=1

•The pthread tuning environment variable PTHREAD_RWLOCK_SPIN_YIELD is set to 1 to improve performance when a large number of connections are used. Set the PTHREAD_RWLOCK_SPIN_YIELD environmental variable by adding the following line to /etc/opt/dirsrv/config/dirsrv:

export PTHREAD_RWLOCK_SPIN_YIELD=1

•Set maxfiles_lim (the hard file limit per process) to at least 4096.

•Set max_thread_proc (the maximum number of threads per process) to 256.

•Set maxdsize_64bit (the maximum data-segment size for a 64-bit process) to at least the size of nsslapd-cachememsize* 2.3 + nsslapd-dbcachesize. More information about nsslapd-cachememsizeand nsslapd-dbcachesizeis provided in the “Tuning recommendations” section.

Directory server tuning overview

HP recommends the following guidelines for tuning the directory server:

3

Page 2 Page 4
Page 3
Image 3
HP UX Direry Server manual System parameter tuning, Directory server tuning overview
Page 2 Page 4

UX Direry Server specifications

HP UX Directory Server is a robust and scalable solution designed for managing directory information within enterprise networks. Developed by Hewlett-Packard (HP), this server offers an extensive set of features tailored to meet the needs of organizations that require an efficient way to store, manage, and retrieve identity and access data.

One of the key features of HP UX Directory Server is its ability to handle large directories with significant volumes of data. Built on a highly optimized architecture, it provides excellent performance and can support millions of entries without sacrificing speed or reliability. This capability makes it an ideal choice for large-scale deployments in enterprises that require high availability and responsiveness.

In addition to its scalability, HP UX Directory Server supports a wide range of protocols, including LDAP (Lightweight Directory Access Protocol), which ensures seamless integration with diverse applications and systems across various platforms. The server maintains standards compliance, which facilitates interoperability and simplifies administration tasks.

Security is a top priority for HP UX Directory Server, offering an array of features to protect sensitive information. It supports secure data transmission via TLS/SSL protocols, ensuring encrypted communication between clients and servers. Advanced access controls allow administrators to define fine-grained permissions, helping to safeguard directory data against unauthorized access.

Another salient feature of HP UX Directory Server is its replication capabilities. The server can replicate directory data across multiple instances, ensuring data consistency and availability in distributed environments. This feature is essential for businesses operating across different geographical locations or requiring failover solutions for disaster recovery.

HP UX Directory Server also comes equipped with tools for data management, including an intuitive administration console for configuring and monitoring the server. Additionally, it offers customizable schema capabilities, enabling organizations to tailor the directory structure to fit their specific needs.

Integration with existing identity management solutions is streamlined through connectors and APIs, allowing organizations to extend their directory services and enhance user experience.

In summary, HP UX Directory Server is a powerful directory management solution that combines scalability, security, and integration flexibility. Its support for industry standards, advanced replication, and comprehensive administrative tools makes it an essential asset for organizations seeking to manage identity and access efficiently. By leveraging this technology, businesses can improve their operational efficiency and ensure a secure and organized approach to directory management.
Top Page Image Contents