Bug 2192969

Summary: Better handling of the command line and web UI cert search and/or list features
Product: Red Hat Enterprise Linux 9 Reporter: Rob Crittenden <rcritten>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: Mohammad Rizwan <myusuf>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.2CC: ademir.ladeira, amayberr, amore, arajendr, bugzilla-pkiqe, cilmar, ckelley, frenaud, ipa-qe, msauton, negativo17, rcritten, rjeffman, sumenon, tscherf
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.10.2-2.el9 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 2164349 Environment:
Last Closed: 2023-11-07 08:34:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1959057, 2164349    
Bug Blocks: 2164347    

Comment 10 Mohammad Rizwan 2023-07-05 10:39:46 UTC
version:
ipa-server-4.10.2-2.el9.x86_64

Steps:
1. install ipa-server
2. generate 4000 certificate
3. $ time ipa cert-find



time take on old version:

[root@master ~]# time ipa cert-find
ipa: WARNING: Search result has been truncated: Configured size limit exceeded
------------------------
100 certificates matched
------------------------
[..]

real	0m16.550s
user	0m0.526s
sys	0m0.051s



time taken on latest version:

[root@master ~]# time ipa cert-find
------------------------
100 certificates matched
------------------------
[..]
------------------------------
Number of entries returned 100
------------------------------

real	0m2.708s
user	0m0.577s
sys	0m0.057s


when ipa cert-find without sizelimit
/var/log/httpd/access_log

xx.xx.xx.xx - - [05/Jul/2023:06:30:17 -0400] "POST /ca/rest/certs/search?size=100 HTTP/1.1" 200 55091
xx.xx.xx.xx - admin [05/Jul/2023:06:30:17 -0400] "POST /ipa/session/json HTTP/1.1" 200 2001

--sizelimit=5
xx.xx.xx.xx - - [05/Jul/2023:06:34:42 -0400] "POST /ca/rest/certs/search?size=5 HTTP/1.1" 200 2903
xx.xx.xx.xx - admin [05/Jul/2023:06:34:42 -0400] "POST /ipa/session/json HTTP/1.1" 200 407


--sizelimit=abc
[root@master ~]# ipa cert-find --sizelimit=abc
ipa: ERROR: invalid 'sizelimit': must be an integer
[root@master ~]# ipa cert-find --sizelimit=-1
ipa: ERROR: invalid 'sizelimit': must be at least 0
[root@master ~]#

--sizelimit=120

xx.xx.xx.xx - - [05/Jul/2023:06:36:14 -0400] "POST /ca/rest/certs/search?size=120 HTTP/1.1" 200 66082
xx.xx.xx.xx - admin [05/Jul/2023:06:36:14 -0400] "POST /ipa/session/json HTTP/1.1" 200 2326

[root@master ~]# ipa cert-find --sizelimit=120
------------------------
120 certificates matched
------------------------
[..]




There is significant difference between time taken on old and new version, hence marking the bug as verified.

Comment 15 errata-xmlrpc 2023-11-07 08:34:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6477