Description of problem: Currently schema compat processes ldap entries in real time and when a major nested group change occurs, the amount of processing triggered by memberof generates a substantial degradation in performance of 389 Directory Server. I would like to request that slapi-nis provide a configuration option to function on a tunable polling interval rather than realtime, or optimize by allowing the plugin to pause during these large memberof computations and then run against the entire change as a whole. Version-Release number of selected component (if applicable): slapi-nis-0.28-1.fc15.x86_64 How reproducible: 100% Steps to Reproduce: 1. With replica systems configured, delete a complex nested group 2. memberof will process all of the individual objects to remove the membership of the group and replicate this change to the replicas, schema compat will run on all of these systems causing a major performance hit on all replica servers. Actual results: Huge performance hit Expected results: Minimal impact from processing all the changes as a whole rather than individually in realtime. Additional info:
This turns out to be harder than I expected, mainly because the entry's previous contents are gone after the modification is completed. This means that compat entries whose values used to include data from the entry that's being modified can be missed because that relationship won't be there when we get back to it later. Starting with 0.30, and continuing in 0.33 and 0.34, though, the plugin is much more aggressive about ignoring modify operations which won't affect the data it's presenting, which should greatly reduce the amount of work the plugin tries to do. Please retest with the candidate update, once it's built.
slapi-nis-0.34-1.fc15 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/slapi-nis-0.34-1.fc15
slapi-nis-0.34-1.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/slapi-nis-0.34-1.fc16
Package slapi-nis-0.34-1.fc16: * should fix your issue, * was pushed to the Fedora 16 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing slapi-nis-0.34-1.fc16' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-0722/slapi-nis-0.34-1.fc16 then log in and leave karma (feedback).
slapi-nis-0.36-1.fc15 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report.
slapi-nis-0.36-1.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.