Bug 2084223
Summary: | 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results [rhel-7.9.z] | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Akshay Sakure <asakure> |
Component: | ipa | Assignee: | Florence Blanc-Renaud <frenaud> |
Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
Severity: | high | Docs Contact: | |
Priority: | unspecified | ||
Version: | 7.9 | CC: | abokovoy, aboscatt, atikhono, cobrown, frenaud, gkaihoro, grajaiya, jhrozek, jstephen, jvavra, kpfleming, lslebodn, michdavi, mjurasek, mzidek, ndehadra, pbrezina, pkettman, rbuddavenkataprathap, rcritten, ssidhaye, tscherf, vvanhaft, wrydberg |
Target Milestone: | rc | Keywords: | Reopened, Triaged, ZStream |
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Linux | ||
Whiteboard: | sync-to-jira | ||
Fixed In Version: | ipa-4.6.8-5.el7_9.12 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2022-11-02 16:37:02 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Akshay Sakure
2022-05-11 16:59:16 UTC
All that is done on IPA side is a call to SSSD to resolve SIDs. If there is a slowdown, that means SSSD responses are slow. Moving to SSSD to investigate. This happening on RHEL 8.5 also. Customer has an ad trust - one way non transitive with CHILD DOMAIN in AD, NOT Root domain. 389-ds-base-1.4.3.23-14.module+el8.5.0+14377+c731dc97.x86_64 Tue May 17 11:27:46 2022 389-ds-base-libs-1.4.3.23-14.module+el8.5.0+14377+c731dc97.x86_64 Tue May 17 11:27:17 2022 device-mapper-multipath-0.8.4-17.el8.x86_64 Tue Jan 25 10:03:12 2022 device-mapper-multipath-libs-0.8.4-17.el8.x86_64 Tue Jan 25 10:03:12 2022 ipa-client-4.9.6-10.module+el8.5.0+13587+92118e57.x86_64 Tue Jan 25 10:03:38 2022 ipa-client-common-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:00:18 2022 ipa-common-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:03 2022 ipa-healthcheck-0.7-6.module+el8.5.0+11410+91a33fe4.noarch Tue Jan 25 10:03:41 2022 ipa-healthcheck-core-0.7-6.module+el8.5.0+11410+91a33fe4.noarch Tue Jan 25 10:02:40 2022 ipa-selinux-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:02:41 2022 ipa-server-4.9.6-10.module+el8.5.0+13587+92118e57.x86_64 Tue Jan 25 10:03:40 2022 ipa-server-common-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:29 2022 ipa-server-dns-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:41 2022 ipa-server-trust-ad-4.9.6-10.module+el8.5.0+13587+92118e57.x86_64 Tue Jan 25 10:03:41 2022 krb5-libs-1.18.2-14.el8.x86_64 Tue Jan 25 10:01:11 2022 krb5-pkinit-1.18.2-14.el8.x86_64 Tue Jan 25 10:03:15 2022 krb5-server-1.18.2-14.el8.x86_64 Tue Jan 25 10:02:40 2022 krb5-workstation-1.18.2-14.el8.x86_64 Tue Jan 25 10:02:41 2022 libipa_hbac-2.5.2-2.el8_5.4.x86_64 Tue Mar 15 11:23:01 2022 perl-Text-ParseWords-3.30-395.el8.noarch Mon May 4 10:07:18 2020 perl-threads-2.21-2.el8.x86_64 Mon May 4 10:07:21 2020 perl-threads-shared-1.58-2.el8.x86_64 Mon May 4 10:07:21 2020 python3-iniparse-0.4-31.el8.noarch Fri May 1 20:44:35 2020 python3-ipaclient-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:38 2022 python3-ipalib-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:36 2022 python3-ipaserver-4.9.6-10.module+el8.5.0+13587+92118e57.noarch Tue Jan 25 10:03:40 2022 python3-libipa_hbac-2.5.2-2.el8_5.4.x86_64 Tue Mar 15 11:23:31 2022 redhat-logos-ipa-84.5-1.el8.noarch Tue Jan 25 10:00:18 2022 slapi-nis-0.56.6-4.module+el8.5.0+12583+bf7ffcf6.x86_64 Tue Jan 25 10:03:28 2022 sssd-ipa-2.5.2-2.el8_5.4.x86_64 Tue Mar 15 11:23:23 2022 sssd-krb5-2.5.2-2.el8_5.4.x86_64 Tue Mar 15 11:23:24 2022 sssd-krb5-common-2.5.2-2.el8_5.4.x86_64 Tue Mar 15 11:23:23 2022 words-3.0-28.el8.noarch Fri May 1 20:45:51 2020 Hi all, I am providing the encrypted file with logs that were requested. I apologize for the delay. If anything else is needed, please let me know. Corey Brown, RHCE Technical Account Manager(TAM) Red Hat, Inc. I am re-opening this issue in order to properly track the IPA fix on RHEL 7.9. RHEL 7.9 needs the fix from ipa-4-6 branch. RHEL 8 and RHEL 9 will inherit the fix from the releases 4.9.10+ and 4.10.0+. Fixed upstream: ipa-4-6: https://pagure.io/freeipa/c/6787812a3512f5135516cc8849d3b27565e7910f ipa-4-9: https://pagure.io/freeipa/c/cfca49c469e822199cbdccd05d4c4a4cbf281448 master: https://pagure.io/freeipa/c/e06f0cc9b4982a4a5f10e841d99c8264f9ac0feb Is this version "ipa-4.6.8-5.el7_9.12" available to download ? It was metnioned that the issue is fixed as per Florence Blanc-Renaud 2022-10-06 14:41:54 UTC Fixed In Version: ipa-4.6.8-5.el7_9.12 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (ipa bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7342 Did this solution worked for anyone ? We seem to have this working okay with manageable time in CLI. But on the GUI, it is taking still very long times. We have updated the errata on our systems to the recommended levels and do not see the issue resolved yet . Are we missing anything ? Can someone take a look and help ? [root@IDMmaster~]# rpm -qa |grep ipa python2-ipalib-4.6.8-5.el7_9.12.noarch ipa-client-common-4.6.8-5.el7_9.12.noarch libipa_hbac-1.16.5-10.el7_9.13.x86_64 ipa-server-common-4.6.8-5.el7_9.12.noarch ipa-client-4.6.8-5.el7_9.12.x86_64 python-iniparse-0.4-9.el7.noarch python-libipa_hbac-1.16.5-10.el7_9.13.x86_64 ipa-server-4.6.8-5.el7_9.12.x86_64 python-ipaddress-1.0.16-2.el7.noarch ipa-common-4.6.8-5.el7_9.12.noarch python2-ipaclient-4.6.8-5.el7_9.12.noarch sssd-ipa-1.16.5-10.el7_9.13.x86_64 python2-ipaserver-4.6.8-5.el7_9.12.noarch ipa-server-trust-ad-4.6.8-5.el7_9.12.x86_64 python-ipaddr-2.1.11-2.el7.noarch [root@IDMmaster~]# @(In reply to Prathap from comment #57) > Did this solution worked for anyone ? We seem to have this working okay with > manageable time in CLI. But on the GUI, it is taking still very long times. > We have updated the errata on our systems to the recommended levels and do > not see the issue resolved yet . > Are we missing anything ? Can someone take a look and help ? > If the issue seems to happen mainly while using the GUI, please open a new BZ and provide the usual logs: - enable SSSD debug logs in /etc/sssd/sssd.conf (debug_level = 9) - set ipa server in debug mode: - create a file /etc/ipa/server.conf with the following content: [globa] debug = True - restart ipa with ipactl restart - repeat the webui operation that is taking a long time - wait a few sec for 389-ds to flush the logs - gather the fresh logs with sos report |