Description of problem:
Operations with groups which have a lot of users, e.g. 15K, are very slow in IPA management framework- both CLI and Web UI.
`ipa group-find` and `ipa group-show` calls takes a lot of resources in httpd process. The computation takes a lot of time(120s) so CLI will time out. In Web UI, when it finally receives the data, internal computations to render group members takes also a lot of time(e.g. 8s).
Version-Release number of selected component (if applicable):
3.x - 4.x (every)
Steps to Reproduce:
1. create IPA instance with 15K+ users in ipausers group
2. call `ipa group-show ipausers`
Hi server load, CLI timeout.
CLI will print result in timely fashion.
Ticket #4948 is also related - removes member fetching in comboboxes in Web UI
Related faster DN implementation:
Ticket 4947 fixed upstream
Faster Web UI:
* 68f04643d6022707e8ccac9f8b817542d9022119 jQuery.ordered_map: faster creation
* 60997b58b88fd5e82663857f94ced7544d0220cc jQuery.ordered_map: remove map attribute
https://fedorahosted.org/freeipa/ticket/4995 was postponed upstream, removing from this bug.
Tickets 4947 and 4965 are done, so moving the Bug to POST.
Created attachment 1073517 [details]
Verified fix using IPA server 4.2.0.
See log file for performance timings.
CLI like group-show, group-find provides result for 20K+ users in ~4-5 secs
WEB Users groups provides result for 20K+ users in ~8-10 secs.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.