Bug 681562

Summary:	id -G group resolution takes extremely long
Product:	[Fedora] Fedora	Reporter:	Marcus Moeller <marcus.moeller>
Component:	sssd	Assignee:	Stephen Gallagher <sgallagh>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	jhrozek, sbose, sgallagh, ssorce
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	sssd-1.6.0-2.fc16	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	742052 (view as bug list)		Environment:
Last Closed:	2011-08-22 15:19:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	742052

Description Marcus Moeller 2011-03-02 15:32:22 UTC

Description of problem:
id $USERNAME

takes more than 8 minutes.

id -G $USERNAME is fast.

It seems id $USERNAME first looks up the list of groups (like 'id -G') and then requests all of the groups (and nested groups) associated with that account, as well as ALL the users in any of those groups.

Instead, sssd should only look up the groups and the LIST of users in those
groups (and not also grabbing the full set of data on those users).

Kind Regards
Marcus

Comment 1 Sumit Bose 2011-03-02 16:20:44 UTC

This issue it tracked upstream in https://fedorahosted.org/sssd/ticket/799 .

Comment 2 Marcus Moeller 2011-04-12 10:29:07 UTC

any update on that?

Comment 3 Jakub Hrozek 2011-04-12 10:48:27 UTC

(In reply to comment #2)
> any update on that?

Yes, the fix I did for the issue originally (downloading and saving just the minimal amount of data) did not bring as much speedup as I had hoped for. So we decided to do one more optimization - if the server supports a dereference search (OpenLDAP, 389DS) or ASQ (Active Directory), use it to get all members in a single LDAP request.

Unfortunately doing this right is much more work, so it is taking longer than originally expected. But this bug one of the blockers for 1.6, so it definitely should make that release.

Comment 4 Fedora Update System 2011-08-05 14:33:47 UTC

sssd-1.6.0-2.fc16, libtevent-0.9.13-1.fc16, libldb-1.1.0-1.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/libtevent-0.9.13-1.fc16,libldb-1.1.0-1.fc16,sssd-1.6.0-2.fc16

Comment 5 Fedora Update System 2011-08-22 15:19:42 UTC

sssd-1.6.0-2.fc16, libtevent-0.9.13-1.fc16, libldb-1.1.0-1.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.