[Freeipa-users] LDAP/SSSD/IPA performance

[Bret Wortman]

Collecting my various threads together under one big issue and adding 
this new data point:

Our web UI on our slow network is exhibiting some strange behavior as well.

When selecting, for example, the "Users", it can take up to 5 seconds to 
fetch 20 out of our 56 entries.

When switching to "Hosts", it took 4 seconds for the footer to show that 
there would be 47 pages in total, then after 10 seconds total, the page 
loaded 20 of 939 entries. When I select a host, the previously-selected 
host will actually be displayed for upwards of 8-10 seconds (while the 
spinning cursor spins near the word Logout) until the host actually loads.

Is it just me, or does this, plus everything else, start to sound like 
LDAP is struggling?

I ran a test using ldapsearch in authenticated and unauthenticated mode 
from my workstation and here's what I found, which may tell us nothing:

# time ldapsearch -x -H -ldap://zsipa.foo.net 
base="uid=bretw,cn=users,cn=accounts,dc=foo,dc=net"
:
real    0m2.047s
user   0m0.000s
sys     0m0.001s
# time ldapsearch -Y GSSAPI -H ldap://zsipa.foo.net 
base="uid=bretw,cn=users,cn=accounts,dc=foo,dc=net"
:
real    0m2.816s
user   0m0.004s
sys     0m0.002s

When I did this locally on the ipa master:

# ssh zsipa.foo.net
# time ldapsearch -Y GSSAPI 
base="uid=bretw,cn=uses,cn=accounts,dc=foo,dc=net"
:
real    0m0.847s
user   0m0.007s
sys     0m0.006s
#


-- 
*Bret Wortman*

http://damascusgrp.com/
http://about.me/wortmanbret

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140523/8f28fae4/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 51f7de33e4b08d2bdb8b4860
Type: image/png
Size: 28526 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140523/8f28fae4/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3766 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140523/8f28fae4/attachment.p7s>