Assume environment:

• number of users: 300
• each user member of 5 hbac rules and 5 sudo rules
• search size limit increased to 300.

Simple user-find will results in:

• 900 operations #5281
• additional 300*(5+5) = 3000 search in order to resolve sudo/hbac rule DN(contains nsunique id) to cn

Result: very slow search.

Possible improvements
1. add DNs to a map -> limit the number of searches to a number of rules
2. skip member fetching when unnessary - #4995

-> this ticket is about #1