[Freeipa-users] ipa-replica-install IPA startup timing issue

[Alexander Bokovoy]

On Mon, 14 Mar 2016, thierry bordaz wrote:
>Hi Daryl,
>
>As soon as initialized with +150000 users, DS instance starts in more 
>than a minute.
>I guess a plugin startup may delay the DS startup itself and some 
>pstack during that minute will give us some info.
>Regarding the krb authentication this is difficult to say if they are 
>delayed by the number of users. You may issue something like 'ipa 
>user-find <xxx>' and the access log should show if the authentication 
>phase is really slow.
If slapi-nis is active, it populates its tree on startup, delaying
actual start of 389-ds. This is fixed in slapi-nis 0.55 (in Fedora) and
will be available in RHEL 7 in next update.

You can check if it is a culprit by disabling compat tree. However,
currently compat tree is used by SUDO in SSSD.


-- 
/ Alexander Bokovoy