[SSSD] Announcing SSSD 1.5.14
Simo Sorce
simo at redhat.com
Tue Nov 8 02:04:30 UTC 2011
Tim could you take a network trace while performing the initgroups
operations ?
I'd like to asses if there is a problem with network operations.
Simo.
On Tue, 2011-11-08 at 11:26 +1000, GOLLSCHEWSKY, Tim wrote:
> > > Just thought I'd contribute my results in case this helps with your
> > > investigation of the larger problem. I assume there are other organisations
> > > with huge AD/LDAP directories that are having similar issues with ssh
> > > authentication times.
> >
> > Out of interest, what performance do you get in those two cases if you symlink
> > cache_default.ldb to /dev/shm/cache_default.ldb?
>
> I've re-run my tests, with and without the symlink to /dev/shm:
>
> No symlink:
> Time Size of cache.ldb
> With ldap_rfc2307bis_initgroup_filter 6.43s 7553024
> WithOUT ldap_rfc2307bis_initgroup_filter 43.95s 15974400
>
> With symlink:
> Time Size of cache.ldb
> With ldap_rfc2307bis_initgroup_filter 4.86s 7528448
> WithOUT ldap_rfc2307bis_initgroup_filter 26.82s 15962112
>
> So the symlink does provide some improvement. But 26 seconds is still not acceptable for an ssh login time.
>
> This is with sssd v1.5.15 BTW.
>
> Best regards,
>
> Tim Gollschewsky.
>
> This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
> Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at suncorp.com.au.
> The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
--
Simo Sorce * Red Hat, Inc * New York
More information about the sssd-devel
mailing list