News for hackers. Stuff that matters.

A comment on The Enterprise Experience. Parent comment

Re:The Enterprise Experience by Aeolun on Sunday August 17, 2025 @08:28PM (#44936176)
> For example, I didn't understand why Active Directory uses search dialog boxes for every "picker" GUI control instead of a simpler drop-down or something similar... until I worked in an environment with 2 million objects in the directory.

And that’s when you realize that searching in AD is actually dog slow, and you are better off just syncing the whole thing to a proper database, then checking if the object still exists after.

Seriously, why does a search that takes 1ms in postgres take 3 full seconds in AD?

[ Parent | on HN ]
Re:The Enterprise Experience by jiggawatts on Sunday August 17, 2025 @09:39PM (#44936570)
It's a very simple database engine, effectively the same as Microsoft Access but 64-bit and server hosted. The internal data representation is also sub-optimal because it uses a triplestore (key-column-value) to support LDAP schema changes without having to apply matching SQL schema changes. I don't believe it has any sort of full-text indexing capability either, it just uses ordinary sorted indexes. Hence, some search types are effectively table scans.
[ Parent | on HN ]
Re:The Enterprise Experience by Muromec on Monday August 18, 2025 @03:18AM (#44938194)
>Seriously, why does a search that takes 1ms in postgres take 3 full seconds in AD?

Because when specialization occurs, every specialized component (including people) is selected against performance and other non-essential metrics.

[ Parent | on HN ]