[SSSD] Announcing SSSD 1.5.14
Jakub Hrozek
jhrozek at redhat.com
Tue Dec 20 11:26:37 UTC 2011
On Tue, Nov 08, 2011 at 10:31:56AM +0000, John Hodrien wrote:
> On Tue, 8 Nov 2011, GOLLSCHEWSKY, Tim wrote:
>
> >I've re-run my tests, with and without the symlink to /dev/shm:
> >
> >No symlink:
> > Time Size of cache.ldb
> > With ldap_rfc2307bis_initgroup_filter 6.43s 7553024
> > WithOUT ldap_rfc2307bis_initgroup_filter 43.95s 15974400
> >
> >With symlink:
> > Time Size of cache.ldb
> > With ldap_rfc2307bis_initgroup_filter 4.86s 7528448
> > WithOUT ldap_rfc2307bis_initgroup_filter 26.82s 15962112
> >
> >So the symlink does provide some improvement. But 26 seconds is still not
> >acceptable for an ssh login time.
>
> Sure. Just for info, picking on a user I know to be in a lot of groups (92)
> against AD with a reasonable amount of nested groups and no cache, id takes
> 5-10 seconds (varying with load on ldap servers I guess), and final cache.ldb
> size is 13627392 so not far off yours. That was tested with 1.6.1.
>
> jh
Just for the record, running plain "id" is not the best way to measure
how long does the initgroups() operation take, "id -G" is much better.
The difference is that without -G, id would also run getgrgid() on all
the returned GID numbers.
More information about the sssd-devel
mailing list