[Freeipa-devel] [PATCH] script for provisioning

[thierry bordaz]

Hello,

A performance bottleneck during provisioning was described 
http://www.freeipa.org/page/V4/Performance_Improvements#typical_provisioning:_ldapadd_entries.2C_migrate-ds...

I wrote the attached script that is following 
http://www.freeipa.org/page/V4/Performance_Improvements#Algorithm

This is a preliminary script that needs to be improved but just to check 
it matches basic requirements I am sending it to the alias to get some 
feedback.

The output of a provisioning session is below. The steps are:

  * install freeipa-server
  * create a provisioning file using
    https://github.com/freeipa/freeipa-tools/blob/master/create-test-data.py
  * ipa-provision.py prepare
  * ipa-provision.py import
  * ipa-provision.py finish

Note: you will likely need to define the DM password with the option '-w 
<password>'

regards
thierry


/tmp/ipa-provision.py prepare -f 
/tmp/1K_users_800_hosts_groups_hostgroups_sudorules_hbac_rules.ldif -d 1
entrycache = 10485760
dncache    = 10485760
dbcache    = 209715200
dblock     = 10000
Preparation of the bulk import is now completed
If you want to continue:
   - run /tmp/ipa-provision.py import -f 
/tmp/1K_users_800_hosts_groups_hostgroups_sudorules_hbac_rules.ldif
   - run /tmp/ipa-provision.py finish -b <suffix_dn>

If you want to not continue:
   - run /tmp/ipa-provision.py abort



/tmp/ipa-provision import -f 
/tmp/1K_users_800_hosts_groups_hostgroups_sudorules_hbac_rules.ldif -debug 2
adding new entry 
"uid=user0,cn=users,cn=accounts,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"

adding new entry 
"uid=user1,cn=users,cn=accounts,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"

adding new entry 
"uid=user2,cn=users,cn=accounts,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"
...
adding new entry 
"ipaUniqueID=autogenerate,cn=hbac,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"

adding new entry 
"ipaUniqueID=autogenerate,cn=hbac,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"

Bulk import is now completed
You need to run:
   - run /tmp/ipa-provision.py finish -b <suffix_dn>



/tmp/ipa-provision.py finish

Waiting for (objectClass=inetorgperson) fixup to complete...
Completed filter (objectClass=inetorgperson)

Waiting for (objectClass=ipausergroup) fixup to complete...
Completed filter (objectClass=ipausergroup)

Waiting for (objectClass=ipahost) fixup to complete...
Completed filter (objectClass=ipahost)

Waiting for (objectClass=ipahostgroup) fixup to complete...
Completed filter (objectClass=ipahostgroup)

Waiting for (objectClass=ipasudorule) fixup to complete...
Completed filter (objectClass=ipasudorule)

Waiting for (objectClass=ipahbacrule) fixup to complete...
Completed filter (objectClass=ipahbacrule)

Bulk import and fixup tasks are now completed

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160603/02bf3779/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipa-provision.py
Type: text/x-python
Size: 23915 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160603/02bf3779/attachment.py>