Bug 2172107

Summary: 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results in RHEL 8.5
Product: Red Hat Enterprise Linux 8 Reporter: Corey Brown <cobrown>
Component: ipaAssignee: Florence Blanc-Renaud <frenaud>
Status: CLOSED ERRATA QA Contact: Sudhir Menon <sumenon>
Severity: high Docs Contact:
Priority: unspecified    
Version: 8.5CC: amore, gkaihoro, kechoi, mpolovka, mralph, rcritten, rjeffman, sumenon, tscherf, wrydberg
Target Milestone: rcKeywords: Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.9.12-2.module+el8.9.0+18921+013c0de2 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-11-14 15:32:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Corey Brown 2023-02-21 14:15:01 UTC
Description of problem:
'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results

Version-Release number of selected component (if applicable):
ipa-4.6.8-5.el7_9.12

Always

Steps to Reproduce:
1. Install IPA server, set up IPA-AD trust. 
2. Create IDView  (idview) in IPA with larger number of idoverrides.
3. Run '# time ipa idview-show idviewname' command and see how long it takes.

Actual results:
'ipa idview-show idviewname' & IPA WebUI taking long time to show results, it almost take 1-2.5 minutes which is not acceptable and makes the tool unusable.

Expected results:
'ipa idview-show idviewname' & IPA WebUI should show the results quicker. 

Additional info:
Several things including some sssd tweaks have been tried but it didn't make significant difference yet.

Comment 2 Rob Crittenden 2023-02-21 14:21:22 UTC
What things, including sssd tweaks, have been tried? What troubleshooting has already been done?

Comment 4 kechoi 2023-03-21 15:36:00 UTC
Here is the id-view load time and package versions.
 
[root@idma2 ~]# time ipa idview-show Legacy
  ID View Name: Legacy
…
 
real    6m17.204s
user    0m0.495s
sys     0m0.066s
 
[root@idma2 ~]# rpm -qa | grep ipa
python3-ipalib-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
redhat-logos-ipa-84.5-1.el8.noarch
ipa-healthcheck-0.7-14.module+el8.7.0+15352+88b578e5.noarch
ipa-server-trust-ad-4.9.10-9.module+el8.7.0+17437+cf46f77f.x86_64
python3-iniparse-0.4-31.el8.noarch
ipa-client-common-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
python3-libipa_hbac-2.7.3-4.el8_7.3.x86_64
ipa-server-dns-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
ipa-healthcheck-core-0.7-14.module+el8.7.0+15352+88b578e5.noarch
ipa-server-common-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
sssd-ipa-2.7.3-4.el8_7.3.x86_64
python3-ipaserver-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
libipa_hbac-2.7.3-4.el8_7.3.x86_64
ipa-server-4.9.10-9.module+el8.7.0+17437+cf46f77f.x86_64
ipa-selinux-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
python3-ipaclient-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
ipa-common-4.9.10-9.module+el8.7.0+17437+cf46f77f.noarch
ipa-client-4.9.10-9.module+el8.7.0+17437+cf46f77f.x86_64
 
[root@idma2 ~]# rpm -qa | grep sssd
sssd-idp-2.7.3-4.el8_7.3.x86_64
python3-sssdconfig-2.7.3-4.el8_7.3.noarch
sssd-kcm-2.7.3-4.el8_7.3.x86_64
sssd-client-2.7.3-4.el8_7.3.x86_64
sssd-common-2.7.3-4.el8_7.3.x86_64
sssd-tools-2.7.3-4.el8_7.3.x86_64
sssd-ipa-2.7.3-4.el8_7.3.x86_64
sssd-winbind-idmap-2.7.3-4.el8_7.3.x86_64
sssd-dbus-2.7.3-4.el8_7.3.x86_64
sssd-common-pac-2.7.3-4.el8_7.3.x86_64
sssd-nfs-idmap-2.7.3-4.el8_7.3.x86_64
sssd-krb5-common-2.7.3-4.el8_7.3.x86_64

Comment 6 Florence Blanc-Renaud 2023-05-02 18:24:08 UTC
Upstream ticket:
https://pagure.io/freeipa/issue/9372

Comment 7 Rob Crittenden 2023-05-05 18:18:32 UTC
Fixed upstream
master:
https://pagure.io/freeipa/c/c8c05289f8078257a85f24cca907a094dd793c05

Comment 16 errata-xmlrpc 2023-11-14 15:32:50 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (idm:client and idm:DL1 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6977