Configuration Guide › LDAP User Store Management › How to Improve Directory Search Performance › How to Improve Performance for Large Searches

How to Improve Performance for Large Searches

When CA IdentityMinder manages a huge user store, searches that return many results can cause the system to run out of memory. To help prevent memory issues, you can define limits for large searches.

The following two settings determine how CA IdentityMinder handles large searches:

• Maximum number of rows

  Specifies the maximum number of results that CA IdentityMinder can return when searching a user directory. When the number of results exceeds the limit, an error is displayed.

• Page size

  Specifies the number of objects that can be returned in a single search. If the number of objects exceeds the page size, CA IdentityMinder performs multiple searches.

  Note the following points when specifying Page Size:

  • To use the Search Page Size option, the user store that CA IdentityMinder manages must support paging. Some user store types require additional configuration to support paging. For more information, see the following topics:

    Configure Sun Java System Directory Server Paging Support

    Configure Active Directory Paging Support

  • If the user store does not support paging and a value for maxrows is specified, CA IdentityMinder uses only the maxrows value to control search size.

You can configure maximum row limits and page size in the following places:

• User Store

  In most user stores and databases, you can configure search limits.

  Note: For more information, see the documentation for the user store or database that you are using.

• CA IdentityMinder Directory

  You can configure the DirectorySearch element in the directory configuration file (directory.xml) that you use to create the CA IdentityMinder Directory.

  By default, the value for maximum rows and page size is unlimited for existing directories. For new directories, the value for maximum rows is unlimited and the value for page size is 2000.

• Managed object definition

  To set maximum row limits and page sizes applying to one type of object instead of an entire Directory, configure the managed object definition in the directory.xml file that you use to create the CA IdentityMinder Directory.

  Setting limits for a managed object type allows you to do adjustments that are based on business requirements. For example, most companies have more users than groups. Those companies can set limits for user object searches only.

• Task Search screens

  You can control the number of search results that users see in search and list screens in the User Console. If the number of results exceeds the number of results per page that are defined for the task, users see links to additional pages of results.

  This setting does not affect the number of results that are returned by a search.

  Note: For information on setting page size in search and list screens, see the Administration Guide.

If maximum row limits and page sizes are defined in multiple places, the most specific setting applies. For example, managed object settings take precedence over directory level settings.