Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
Micro Focus Expert
Micro Focus Expert
1275 views

photo attribute in eDirectory for lots of usres

Dear Forum Members,

I would like to set up a method to have a photo attribute for users in eDirectory for a phone book (ldap) application and for GroupWise. The total number of users is about 33k. According to documentation the photo attribute has a max size of 64k. 33000*64k is about 2 GB. So if every user has a 64k photo in eDirectory, the dib will grow with 2 GB. And this is what makes me concerns. The dib is currently 1,7 GB on a replica server with all partitions, so if and when every user has a photo, the dib will grow to about 3,7 GB. Are there any disadvantages, pitfalls, best practices for such a situation? Memory, disk and cpu is not a problem. I know that eGuide has a nice feature. If the photo or jpegphoto attribute contains an uri of a photo, it can display it without any problems. Unfortunately eGuide is not an option and I doubt that GW could sync the photo from an uri.

TIA,
Gellert
Labels (1)
0 Likes
6 Replies
Knowledge Partner
Knowledge Partner

Re: photo attribute in eDirectory for lots of usres

gehorvath wrote:

> The
> total number of users is about 33k. According to documentation the photo
> attribute has a max size of 64k. 33000*64k is about 2 GB. So if every
> user has a 64k photo in eDirectory, the dib will grow with 2 GB. And
> this is what makes me concerns.


Disk space is cheap and photos usually do not change that often, so replication
in unlikely to suffer after the initial load. I've seen trees with a similar #
of user photos work without problems. In some cases custom stream attributes
were used instead of photo/jpegphoto/ldapphoto that can hold higher resolutions
and are not saved inside the DIB. Still replication of the initial load will
take a while, I guess.

--
http://www.is4it.de/en/solution/identity-access-management/

(If you find this post helpful, please click on the star below.)
______________________________________________
https://www.is4it.de/identity-access-management
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: photo attribute in eDirectory for lots of usres

Thank you!
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: photo attribute in eDirectory for lots of usres

Agreed; personally I like to create a custom stream attribute because
thena ll of those images get their own file, but you may then also have
filesystem concerns (do not use ext3 ever, but especially in this case;
XFS is your friend) because of the number of files that will end up in a
single directory. Replication will be whatever it is regardless of the
backend, but if you want it to go faster you should be sure your servers
are on eDirectory 9.x which replicates MUCH faster; you should do this
anyway, other than on OES which has its own patch ecosystem for
eDirectory, since eDirectory 8.8 goes end-of-life (EOL) in October of this
year (2017).

eDirectory has been load tested to much larger sizes; I usually run a
million-object tree because it's easy to do and gives me some data that
others may not see, and have done that for over a decade. A billion
objects were put into a tree way back in 2000, and performance has
improved since then with regard to replication. DIB sizes far beyond a
mere 4 GiB are seen all of the time, so no worries there either.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
Micro Focus Expert
Micro Focus Expert

Re: photo attribute in eDirectory for lots of usres

Unfortunately GW does support only photo or jpegPhoto attribute, so a custom attribute is not an option. Or I could use ldap schema mapping and map the custom attribute to photo or jpegPhoto. So jpegPhoto is not stored as a stream file. That is new for me. I thought it is like the login script and has its separate file under dib directory. I am curious, how does this influence eDirectory cache? Are the stream files cached too? Or only the nds.* files are cached?

Thanks

Gellert
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: photo attribute in eDirectory for lots of usres

On 09/01/2017 03:34 AM, gehorvath wrote:
>
> Unfortunately GW does support only photo or jpegPhoto attribute, so a
> custom attribute is not an option. Or I could use ldap schema mapping
> and map the custom attribute to photo or jpegPhoto. So jpegPhoto is not
> stored as a stream file. That is new for me. I thought it is like the
> login script and has its separate file under dib directory. I am
> curious, how does this influence eDirectory cache? Are the stream files
> cached too? Or only the nds.* files are cached?


I have always assumed the cache would be for everything, but I have never
bothered to test. Data in stream attributes are not typically something
you would want to use as the basis of finding objects in a search, thus
you would likely never want to index them, so performance does not matter
much in that way, and retrieving them has always been fast when requesting
them from an object. In other words, I really doubt it even matters,
except that they tend to be bigger blocks of data, so they would use more
space and, probably, waste it.

Could you elaborate on the 'GW does support only photo or jpegPhoto
attribute' line? Does that mean if you want to map otherwise it will not
be supported, or they just do not let you point to other attributes so you
need tha tLDAP mapping? Where it is LDAP-based now, I cannot imagine they
care too much, unless it is a size issue, though storing huge images in
the directory seems like a bad idea anyway.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
Micro Focus Expert
Micro Focus Expert

Re: photo attribute in eDirectory for lots of usres

The schema mapping between GroupWise and eDirectory is hard coded if you don't use IDM. But there is an option in GW where you can choose the eDirectory source attribute for the photo. Either "Photo" or "jpegPhoto". So you cannot point to a third custom attribute. And this is where eDirectory LDAP schema mapping can help if I choose to use a 3rd attribute to store photos. GW downscales the photos to 64x64 pixel anyway, so size should not be a problem in GW. A higher resolution image is welcomed in the ldap phonebook application.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.