Bug 2192969

Summary: Better handling of the command line and web UI cert search and/or list features
Product: Red Hat Enterprise Linux 9 Reporter: Rob Crittenden <rcritten>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: VERIFIED --- QA Contact: Mohammad Rizwan <myusuf>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.2CC: ademir.ladeira, amayberr, amore, arajendr, bugzilla-pkiqe, cilmar, ckelley, frenaud, ipa-qe, msauton, negativo17, rcritten, rjeffman, sumenon, tscherf
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.10.2-2.el9 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 2164349 Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2164349, 1959057    
Bug Blocks: 2164347    

Comment 10 Mohammad Rizwan 2023-07-05 10:39:46 UTC
version:
ipa-server-4.10.2-2.el9.x86_64

Steps:
1. install ipa-server
2. generate 4000 certificate
3. $ time ipa cert-find



time take on old version:

[root@master ~]# time ipa cert-find
ipa: WARNING: Search result has been truncated: Configured size limit exceeded
------------------------
100 certificates matched
------------------------
[..]

real	0m16.550s
user	0m0.526s
sys	0m0.051s



time taken on latest version:

[root@master ~]# time ipa cert-find
------------------------
100 certificates matched
------------------------
[..]
------------------------------
Number of entries returned 100
------------------------------

real	0m2.708s
user	0m0.577s
sys	0m0.057s


when ipa cert-find without sizelimit
/var/log/httpd/access_log

xx.xx.xx.xx - - [05/Jul/2023:06:30:17 -0400] "POST /ca/rest/certs/search?size=100 HTTP/1.1" 200 55091
xx.xx.xx.xx - admin [05/Jul/2023:06:30:17 -0400] "POST /ipa/session/json HTTP/1.1" 200 2001

--sizelimit=5
xx.xx.xx.xx - - [05/Jul/2023:06:34:42 -0400] "POST /ca/rest/certs/search?size=5 HTTP/1.1" 200 2903
xx.xx.xx.xx - admin [05/Jul/2023:06:34:42 -0400] "POST /ipa/session/json HTTP/1.1" 200 407


--sizelimit=abc
[root@master ~]# ipa cert-find --sizelimit=abc
ipa: ERROR: invalid 'sizelimit': must be an integer
[root@master ~]# ipa cert-find --sizelimit=-1
ipa: ERROR: invalid 'sizelimit': must be at least 0
[root@master ~]#

--sizelimit=120

xx.xx.xx.xx - - [05/Jul/2023:06:36:14 -0400] "POST /ca/rest/certs/search?size=120 HTTP/1.1" 200 66082
xx.xx.xx.xx - admin [05/Jul/2023:06:36:14 -0400] "POST /ipa/session/json HTTP/1.1" 200 2326

[root@master ~]# ipa cert-find --sizelimit=120
------------------------
120 certificates matched
------------------------
[..]




There is significant difference between time taken on old and new version, hence marking the bug as verified.