Post #2575760

2026-05-15 07:15 UTC

&quot;389-DS (Red Hat Directory Server) is the production choice for &gt;1M entries — purpose-built for large directories with a dedicated replication engine&quot; https://linuxcent.com/tag/openldap/ Pure BS. #OpenLDAP serves millions of queries per second with DBs with over a billion users. 389DS doesn&#39;t even manage 1/10th of that. 389DS&#39;s /RedHatDS&#39;s underlying tech was so outdated they had to abandon it all and adopt OpenLDAP&#39;s libraries just to stay functional. Their core server is still garbage even with that.

Replies (2)

@hyc@mastodon.social 2026-05-15 07:20

When other servers were advertising sub-second response times #OpenLDAP was already delivering microsecond response times. We had to update our libraries to use nanosecond resolution timestamps because we're now delivering sub-microsecond performance. Years ahead of *everyone* else in the computing industry. Anyone claiming a better scaling/performance story than OpenLDAP is outright lying. * We broke the microsecond barrier back in 2015: https://lists.openldap.org/hyperkitty/list/openldap-devel@openldap.org/thread/KLNMUTAI2VF4GUVPR7XJATSOT4PQ7WYC/#OHN3EDU5ZWJFABLFKODT2MEF36WGXSXQ

Open ##2938703
@ilias@discuss.systems 2026-05-15 07:42

@hyc@mastodon.social Interesting.. As a user of Redhat IDM, All I can say that it's pretty freaking terrible. 389DS is always the bottleneck, it just can't handle that many requests. Also, it seems like that 389DS has a memory leak bug every other week.. lol

Open ##2938716