[SSSD] Announcing SSSD 1.5.14

Simo Sorce simo at redhat.com
Tue Nov 8 02:04:30 UTC 2011


Tim could you take a network trace while performing the initgroups
operations ?
I'd like to asses if there is a problem with network operations.

Simo.

On Tue, 2011-11-08 at 11:26 +1000, GOLLSCHEWSKY, Tim wrote:
> > > Just thought I'd contribute my results in case this helps with your
> > > investigation of the larger problem.  I assume there are other organisations
> > > with huge AD/LDAP directories that are having similar issues with ssh
> > > authentication times.
> >
> > Out of interest, what performance do you get in those two cases if you symlink
> > cache_default.ldb to /dev/shm/cache_default.ldb?
> 
> I've re-run my tests, with and without the symlink to /dev/shm:
> 
> No symlink:
>                                                Time     Size of cache.ldb
>   With    ldap_rfc2307bis_initgroup_filter     6.43s    7553024
>   WithOUT ldap_rfc2307bis_initgroup_filter    43.95s   15974400
> 
> With symlink:
>                                                Time     Size of cache.ldb
>   With    ldap_rfc2307bis_initgroup_filter     4.86s    7528448
>   WithOUT ldap_rfc2307bis_initgroup_filter    26.82s   15962112
> 
> So the symlink does provide some improvement.  But 26 seconds is still not acceptable for an ssh login time.
> 
> This is with sssd v1.5.15 BTW.
> 
> Best regards,
> 
> Tim Gollschewsky.
> 
> This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
> Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at suncorp.com.au.
> The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list