Tim could you take a network trace while performing the initgroups
operations ?
I'd like to asses if there is a problem with network operations.
Simo.
On Tue, 2011-11-08 at 11:26 +1000, GOLLSCHEWSKY, Tim wrote:
> > Just thought I'd contribute my results in case this
helps with your
> > investigation of the larger problem. I assume there are other organisations
> > with huge AD/LDAP directories that are having similar issues with ssh
> > authentication times.
>
> Out of interest, what performance do you get in those two cases if you symlink
> cache_default.ldb to /dev/shm/cache_default.ldb?
I've re-run my tests, with and without the symlink to /dev/shm:
No symlink:
Time Size of cache.ldb
With ldap_rfc2307bis_initgroup_filter 6.43s 7553024
WithOUT ldap_rfc2307bis_initgroup_filter 43.95s 15974400
With symlink:
Time Size of cache.ldb
With ldap_rfc2307bis_initgroup_filter 4.86s 7528448
WithOUT ldap_rfc2307bis_initgroup_filter 26.82s 15962112
So the symlink does provide some improvement. But 26 seconds is still not acceptable for
an ssh login time.
This is with sssd v1.5.15 BTW.
Best regards,
Tim Gollschewsky.
This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related
entities "Suncorp".
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at
suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not
necessarily reflect the view of Suncorp. The content, including attachments, is a
confidential communication between Suncorp and the intended recipient. If you are not the
intended recipient, any use, interference with, disclosure or copying of this e-mail,
including attachments, is unauthorised and expressly prohibited. If you have received this
e-mail in error please contact the sender immediately and delete the e-mail and any
attachments from your system.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel
--
Simo Sorce * Red Hat, Inc * New York