Hi, The bug and corresponding patch that are linked below refer to the following problem, that was discussed on the mailing list a couple of years ago: http://lists.fedoraproject.org/pipermail/389-devel/2009-March/001020.html... http:/lists.fedoraproject.org/pipermail/389-devel/2009-March/001020.html> https://fedorahosted.org/389/ticket/3 https://fedorahosted.org/389/attachment/ticket/3/0001-Ticket-3-acl-cache-... A short description: we noticed that some queries (ldapsearch) to our directory caused a drop in performance, and our log file was filled with the following message: acl_TestRights - cache overflown We noticed that increasing the value ACLPB_MAX_SELECTED_ACLS from 200 to 2000 solved the problem for us. The purpose of the patch is to make this value configurable. Note: while I was trying to fix this problem, I also noticed that aclQueue was not freed anywhere, so I took the freedom to add the following line, assuming that it is right to free it on shutdown - but maybe I am wrong? slapi_ch_free((void**)&aclQueue); Regards, Nadia R. Turpin