Bug 771444

Summary:	Add slapi-nis option to poll for schema compat instead of realtime
Product:	[Fedora] Fedora	Reporter:	Jr Aquino <jr.aquino>
Component:	slapi-nis	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	15	CC:	abokovoy, nalin, rmeggins
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	slapi-nis-0.36-1.fc16	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-04 05:26:32 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jr Aquino 2012-01-03 19:23:32 UTC

Description of problem:
Currently schema compat processes ldap entries in real time and when a major nested group change occurs, the amount of processing triggered by memberof generates a substantial degradation in performance of 389 Directory Server.

I would like to request that slapi-nis provide a configuration option to function on a tunable polling interval rather than realtime, or optimize by allowing the plugin to pause during these large memberof computations and then run against the entire change as a whole.

Version-Release number of selected component (if applicable):
slapi-nis-0.28-1.fc15.x86_64

How reproducible:
100%

Steps to Reproduce:
1. With replica systems configured, delete a complex nested group 
2. memberof will process all of the individual objects to remove the membership of the group and replicate this change to the replicas, schema compat will run on all of these systems causing a major performance hit on all replica servers.
  
Actual results:
Huge performance hit

Expected results:
Minimal impact from processing all the changes as a whole rather than individually in realtime.

Additional info:

Comment 1 Nalin Dahyabhai 2012-01-19 19:43:40 UTC

This turns out to be harder than I expected, mainly because the entry's previous contents are gone after the modification is completed.  This means that compat entries whose values used to include data from the entry that's being modified can be missed because that relationship won't be there when we get back to it later.

Starting with 0.30, and continuing in 0.33 and 0.34, though, the plugin is much more aggressive about ignoring modify operations which won't affect the data it's presenting, which should greatly reduce the amount of work the plugin tries to do.

Please retest with the candidate update, once it's built.

Comment 2 Fedora Update System 2012-01-19 20:02:56 UTC

slapi-nis-0.34-1.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/slapi-nis-0.34-1.fc15

Comment 3 Fedora Update System 2012-01-19 20:03:16 UTC

slapi-nis-0.34-1.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/slapi-nis-0.34-1.fc16

Comment 4 Fedora Update System 2012-01-21 21:49:34 UTC

Package slapi-nis-0.34-1.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing slapi-nis-0.34-1.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-0722/slapi-nis-0.34-1.fc16
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2012-02-04 05:26:32 UTC

slapi-nis-0.36-1.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Fedora Update System 2012-02-04 05:33:18 UTC

slapi-nis-0.36-1.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.