Values for Configuring the Entry Cache

22-14 Oracle Fusion Middleware Performance and Tuning Guide objectclass=oblixorgperson |obuseraccountcontrol=obuseraccountcontrol=activated |obuseraccountcontrol=activatedobuseraccountcontrol= objectclass= objectclass=oblixworkflowstepinstance objectclass=oblixworkflowinstance objectclass=orcljaznpermission obapp=groupservcenterobdynamicparticipantsset= objectclass=orclfeduserinfo You can change the value of orclinmemfiltprocess by using or ldapmodify. See Section 22.12.1, Modifying Instance-Specific Attributes by Using Fusion Middleware Control and Section 22.12.3, Modifying Attributes by Using ldapmodify . Under some conditions, Oracle Internet Directory ignores orclinmemfiltprocess and sends the entire filter to the database. It does this if the filter it receives meets the following conditions: ■ It contains only one parameter, that is, one attribute-value pair. ■ It contains no filter condition other than those in orclinmemfiltprocess ■ It contains an OR condition applied to the terms that are in orclinmemfiltprocess ■ It contains the same terms as in orclinmemfiltprocess, but in a different order The following cases illustrate those conditions. In all of the following cases, orclinmemfiltprocess is set to objectclass=inetorgpersonemployeetype=Contract. Examples Case A manager=cn=john doeobjectclass=inetorgperson employeetype=Contract Oracle Internet Directory sends the filter manager=cn=john doe to the database. Case B uid=rmsmithobjectclass=inetorgpersonemployeetype=Contrac t Oracle Internet Directory sends only uid=rmsmith to the database, then applies the filter objectclass=inetorgpersonemployeetype=Contract to the entries that are returned from the database. Case C |uid=rmsmithobjectclass=inetorgperson employeetype=Contract Oracle Internet Directory Performance Tuning 22-15 In this filter, the terms that match orclinmemfiltprocess are part of an OR condition. Oracle Internet Directory sends the filter, as is, to the database. Case D uid=rmsmithemployeetype=Contract objectclass=inetorgperson Even though some of the terms in this filter match orclinmemfiltprocess, they are in a different order, so Oracle Internet Directory sends the whole filter to the database. You could add employeetype=Contractobjectclass=inetorgperson to orclinmemfiltprocess if you do not want Oracle Internet Directory to send this filter to the database. Case E |uid=rmsmithsn=smithobjectclass=inetorgpersonemployeet ype=Contract In this filter, the terms that match orclinmemfiltprocess are part of an OR condition. Oracle Internet Directory sends the filter, as is, to the database. Case F |uid=rmsmithsn=smithobjectclass=inetorgpersonemployee type=Contract Even though this filter contains an OR operator, it is not applied to the terms that match orclinmemfiltprocess. Oracle Internet Directory sends |uid=rmsmithsn=smith to the directory and applies the filter manager=cn=john doeobjectclass=inetorgperson employeetype=Contract to the entries that are returned from the database. Configuring Multiple Filters If the application is sending multiple filters, and the terms in one filter are a superset of the terms in the other, you must configure orclinmemfiltprocess for both values. For example, suppose the application is sending the following two filters: uid=rmsmithobjectclass=inetorgpersonemployeetype=Contract uid=rmsmithobjectclass=inetorgpersonemployeetype=Contract departmentNumber=627 where departmentNumber=627 matches a lot of entries. You must configure orclinmemfiltprocess as follows: objectclass=inetorgpersonemployeetype=Contract departmentNumber=627 Optimizing Performance for Search baseDN In the DIT, if all the users are under one baseDN, such as cn=users,dc=acme,dc=com, and all the LDAP search clients send base as cn=users,dc=acme,dc=com, then the configuration of the orclinmemfilter will significantly reduce database processing time. See the following example: orclinmemfiltprocess;dn: cn=users,dc=acme,dc=com