I have a 389 DS instance with an OU that has 32K elements. When I run an LDAP search against the OU with cn=Directory Manager the results, all 32K of them are returned in a matter of seconds.

When I use another user account that has all limits set to -1 the query takes a very long time, never completes and the server crashes with an out-of-memory error.

Is there something different in how the searches are run for different users? Is there a way to tune it for a regular user to run as fast and without errors?

Thank you!