Bug 2179186

Summary:	add memberof perf fix from issue 5440 in RHEL for IdM
Product:	Red Hat Enterprise Linux 8	Reporter:	Marc Sauton <msauton>
Component:	389-ds-base	Assignee:	thierry bordaz <tbordaz>
Status:	CLOSED ERRATA	QA Contact:	LDAP QA Team <idm-ds-qe-bugs>
Severity:	high	Docs Contact:
Priority:	high
Version:	8.7	CC:	bsmejkal, idm-ds-dev-bugs, mreynolds, mrhodes, tbordaz, tmihinto
Target Milestone:	rc	Keywords:	Triaged
Target Release:	8.7
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	389-ds-base-1.4.3.34-1.el8_7 389-ds-1.4-8070020230313223913.c6561957	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-04-04 09:47:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marc Sauton 2023-03-16 22:43:53 UTC

Description of problem:

for RHEL IdM with large groups and memberof high cpu use and non response from the LDAP service when there are large user and group updates, add in RHEL-8.7 the fix from 

https://github.com/389ds/389-ds-base/issues/5440
up 5440 - memberof is slow on update/fixup if there are several 'groupattr' #5440

https://github.com/389ds/389-ds-base/commit/9ba2cd33d94aaadc3e60bea8e50c96ca638a7124

this was initially made for RHDS-11 for large groups when memberof is configured with several groupattr values, in 
 https://bugzilla.redhat.com/2123525



Version-Release number of selected component (if applicable):
RHEL-8.7
389-ds-base-1.4.3.30-6.el8_7


How reproducible:
N/A but happened in house

Steps to Reproduce:
1. N/A but happened in house
2.
3.

Actual results:


Expected results:


Additional info:

Comment 7 mreynolds 2023-03-17 20:31:21 UTC

Fix was already included in the upcoming batch update for RHEL 8.7 (and 8.6, 8.4)

Comment 12 bsmejkal 2023-03-27 14:20:25 UTC

Build tested:
389-ds-base-1.4.3.34-1.module+el8.7.0+18367+58a49cb0.x86_64

Steps
Fix is present in the build.
Followed the steps from https://bugzilla.redhat.com/show_bug.cgi?id=2123525#c40

Result
389-ds-base-1.4.3.30-6.module+el8.7.0+16373+1a59bba2.x86_64 - memberof fixup takes ~3 min
389-ds-base-1.4.3.34-1.module+el8.7.0+18367+58a49cb0.x86_64 - memberof fixup takes ~25 seconds

Marking as VERIFIED.

Comment 16 errata-xmlrpc 2023-04-04 09:47:53 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (389-ds:1.4 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:1580