<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 12/21/2015 05:55 PM, Daryl
Fonseca-Holt wrote:<br>
</div>
<blockquote cite="mid:56782EFA.1090300@umanitoba.ca" type="cite">Hi
all,
<br>
<br>
Environment: RHEL6 with IPA 3.0 at current RedHat level. 64-core
256-GB RAM Oracle x4470 M2.
<br>
<br>
During our migration from NIS on Solaris 140,000+ accounts will be
added. After tuning per the guides dbmon.sh shows no roevicts and
we get high cache hit ratios.
<br>
<br>
Per a previous discussion with the list the input is broken down
into batches of less than 1,000 users and the default IPA group is
changed before each batch. This helped greatly.
<br>
<br>
Adding all the users takes many hours. Initially ipa user-add
takes an average 2.3 seconds per user but degrades by the time
there are 140,000 users to an average 6.7 seconds per user.
<br>
<br>
In tracing it appears that a significant portion of the time ipa
user-add takes is not the add itself, it is the query at the end
that displays the resulting user account. Is there any legit way
to prevent this query?
<br>
<br>
The length of time it takes to migrate is not a big concern. The
concern is the start of the fall school term when we typically add
approximately 1,300 accounts per hour during the registration
period with our current system.
<br>
<br>
All suggestions will be appreciated.
<br>
<br>
Regards, Daryl
<br>
<br>
</blockquote>
<font face="Times New Roman, Times, serif">Hi Daryl,<br>
<br>
I can reproduce similar trend of user-add becoming slower and slower.<br>
<br>
Now in my tests (etime=7s) the time was spent half by
authentication and half by ADD and MOD (update of ipausers group).
I agree there are many direct SRCH (~10) but they all seems to be
rapid.<br>
<br>
I know that the vast majority of the time is spent in DS
schema-compat plugin. Disabling it, during provisioning, reduce
the duration by ~3.<br>
Now I do not know if it is a valid option to disable this plugin
during provisioning. <br>
<br>
thanks<br>
thierry<br>
</font>
</body>
</html>