Description of problem:
The %post script checks if a UID is unused by running 'getent passwd', extracting the UID fields, and checking if a candidate UID is in the output list.  It does this for every candidate UID.  Then it does this for groups, but without isolating the GID field, so any entry which contains the candidate GID as a substring will cause that GID to appear to be used.  Our densely populated group list here is causing this loop for many more iterations than it should.

Version-Release number of selected component (if applicable):
389-ds-base-1.3.5.14-1.fc25

How reproducible:
Always

Steps to Reproduce:
1. Upgrade the package on a system with many groups, where 'getent group' is takes a non-trivial amount of time to run.

Actual results:
This %post has been running for three hours on my workstation.

Expected results:
Shorter execution time, by using awk to extract just the GID field, as is done for passwd entries, and possibly by only asking getent for one passwd or group entry at a time, or by caching the enumeration output and then examining that.

Additional info:
Suppressed output attempts to refer to "%dirsrv_uid" and "%dirsrv_gid", which are not defined macros, which will interact badly with the shell that's executing the script.