[SSSD] sssd 1.6.2 reverts to slow processing of rfc2307bis groups

Jakub Hrozek jhrozek at redhat.com
Mon Oct 31 13:32:01 UTC 2011


On Mon, Oct 31, 2011 at 08:26:04AM -0500, Trent Johnson wrote:
> On 10/31/2011 07:57 AM, Jakub Hrozek wrote:
> > On Mon, Oct 31, 2011 at 07:43:10AM -0500, Trent Johnson wrote:
> >> Hi Folks,
> >>
> >> I had been using sssd 1.6.1 on a centos 6 machine and id requests were
> >> processed at a reasonable speed.  Starting apache with ~3500 vhosts and
> >> users took about 30 seconds.  After updating to 1.6.2 apache takes over
> >> 20 minutes to start - the same behaviour that caused us to change from
> >> the 1.5.x branch.
> >>
> >> We are using an active directory server with nested groups on the backend.
> >>
> >> Thanks,
> >> Trent
> >
> > Have you checked the logs? Any chance you are hitting
> > https://fedorahosted.org/sssd/ticket/1073 and sssd_be starts spinning
> > until monitor kills it etc?
> 
> I think it's possible that something like that exists in our group 
> structure.  I don't see anything in sssd_nss.log sssd.log or 
> sssd_DOMAIN.log though.  Would something show up with the default log 
> levels?
> 

The default is 0 so only fatal errors do show up. Can you add
debug_level=10 to [nss] and [domain/DOMAIN] sections?

> sssd_nss seems to eat 100% of the cpu on a single core of the box.

That may be a new bug. Could you get us logs?

> 
> Thanks,
> Trent



More information about the sssd-devel mailing list