6 p.m.
--Apple-Mail=_53EF95BA-A328-418F-B475-452AAD552109
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
It works much better now. Goes from 6s to less than 500ms. Not blazing =
fast but much more usable, thanks a lot.
Le 12 mai 2017 =C3=A0 15:58, Ondra Machacek
<omachace(a)redhat.com> a =
=C3=A9crit :
=20
This is new feature in aaa-ldap tracked here[1].
By default for AD profiles we use this feature, and it should
increase performance in most cases.
=20
But if this is not the case for you, can you just try to change the =
profile
from:
=20
include =3D <ad.properties>
=20
to
=20
include =3D <ad-recursive.properties>
=20
And see if it will be better?
=20
[1] https://bugzilla.redhat.com/show_bug.cgi?id=3D1393407 =
<https://bugzilla.redhat.com/show_bug.cgi?id=3D1393407>
=20
On Fri, May 12, 2017 at 2:54 PM, Fabrice Bacchella =
<fabrice.bacchella(a)orange.fr <mailto:fabrice.bacchella@orange.fr>> =
wrote:
I found that:
=20
http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx =
<http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx>
=20
=20
> Le 12 mai 2017 =C3=A0 14:44, Fabrice Bacchella =
<fabrice.bacchella(a)orange.fr <mailto:fabrice.bacchella@orange.fr>> a =
=C3=A9crit :
>=20
> Ok, I found where it's slow, it's a ldapsearch on our AD:
>=20
> time ldapsearch -a never -E pr=3D100/noprompt -H ldap://ad1 <> -b =
DC=3D... -s sub '(&(groupType:1.2.840.113556.1.4.803:=3D2147483648 =
<tel:(214)%20748-3648>)(&(objectCategory=3Dgroup)(member:1.2.840.113556.1.=
4.1941:=3Duserdn)))' objectGUID name description
>=20
> # numResponses: 70
> # numEntries: 66
> # numReferences: 3
>=20
> real 0m10.801s
> user 0m0.007s
> sys 0m0.012s
>=20
> That matches the log line:
> 2017-05-12 14:22:17,413+02 DEBUG =
[org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-2) [] =
Performing SearchRequest 'SearchRequest(baseDN=3D'...', scope=3DSUB, =
deref=3DNEVER, sizeLimit=3D0, timeLimit=3D0, =
filter=3D'&(objectCategory=3Dgroup)(groupType:1.2.840.113556.1.4.803:=3D21=
47483648)(member:1.2.840.113556.1.4.1941:=3D...)', attrs=3D{objectGUID, =
name, description}, controls=3D{SimplePagedResultsControl(pageSize=3D100, =
isCritical=3Dfalse)})' request on server '...'
> 2017-05-12 14:22:24,456+02 DEBUG =
[org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-1) [] =
SearchResult: SearchResult(resultCode=3D0 (success), messageID=3D3, =
entriesReturned=3D66, referencesReturned=3D0, =
responseControls=3D{SimplePagedResultsControl(pageSize=3D0, =
isCritical=3Dfalse)})
>=20
>=20
> And without 1.2.840.113556.1.4.1941
>=20
> # numResponses: 54
> # numEntries: 50
> # numReferences: 3
>=20
> real 0m0.051s
> user 0m0.008s
> sys 0m0.007s
>=20
> So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but =
without
it, the result is not the same. But I don't know if it's an AD =
or ovirt problem. I'll keep investigating.
>=20
> Thank's for your help.
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org <mailto:Users@ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users =
<http://lists.ovirt.org/mailman/listinfo/users>
=20
=20
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--Apple-Mail=_53EF95BA-A328-418F-B475-452AAD552109
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type"
content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D"">It works much better now. Goes from 6s to less than 500ms. =
Not blazing fast but much more usable, thanks a lot.<div class=3D""><br
=
class=3D""><div class=3D""><div><blockquote
type=3D"cite" class=3D""><div =
class=3D"">Le 12 mai 2017 =C3=A0 15:58, Ondra Machacek <<a =
href=3D"mailto:omachace@redhat.com"
class=3D"">omachace(a)redhat.com</a>&gt;=
a =C3=A9crit :</div><br class=3D"Apple-interchange-newline"><div
=
class=3D""><div dir=3D"ltr" class=3D""><div
class=3D""><div =
class=3D""><div class=3D""><div
class=3D""><div class=3D""><div =
class=3D"">This is new feature in aaa-ldap tracked here[1].<br =
class=3D""></div>By default for AD profiles we use this feature, and it
=
should<br class=3D""></div>increase performance in most cases.<br
=
class=3D""><br class=3D""></div>But if this is not the
case for you, can =
you just try to change the profile<br class=3D""></div>from:<br
=
class=3D""><br class=3D""> include =3D
<ad.properties><br =
class=3D""><br class=3D""></div>to<br
class=3D""><br =
class=3D""> include =3D
<ad-recursive.properties><br =
class=3D""><br class=3D""></div>And see if it will be
better?<br =
class=3D""><div class=3D""><div
class=3D""><div class=3D""><div =
class=3D""><div class=3D""><div
class=3D""><br class=3D"">[1] <a =
href=3D"https://bugzilla.redhat.com/show_bug.cgi?id=3D1393407" =
class=3D"">https://bugzilla.redhat.com/show_bug.cgi?id=3D139...
=
class=3D""></div></div></div></div></div></div></div><div
=
class=3D"gmail_extra"><br class=3D""><div
class=3D"gmail_quote">On Fri, =
May 12, 2017 at 2:54 PM, Fabrice Bacchella <span dir=3D"ltr" =
class=3D""><<a
href=3D"mailto:fabrice.bacchella@orange.fr" =
target=3D"_blank"
class=3D"">fabrice.bacchella(a)orange.fr</a>&gt;</span> =
wrote:<br class=3D""><blockquote class=3D"gmail_quote"
style=3D"margin:0 =
0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div =
style=3D"word-wrap:break-word" class=3D"">I found that:<div
class=3D""><br=
class=3D""></div><div class=3D""><a =
href=3D"http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.a... =
target=3D"_blank" class=3D"">http://dunnry.com/blog/<wbr =
class=3D"">TransitiveLinkValueFilterEvalu<wbr =
class=3D"">ation.aspx</a></div><div
class=3D""><br class=3D""></div><div =
class=3D""><br class=3D""><div
class=3D""><blockquote type=3D"cite" =
class=3D""><div class=3D""><div
class=3D"h5"><div class=3D"">Le 12 mai =
2017 =C3=A0 14:44, Fabrice Bacchella <<a =
href=3D"mailto:fabrice.bacchella@orange.fr" target=3D"_blank" =
class=3D"">fabrice.bacchella(a)orange.fr</a>&gt; a =C3=A9crit
:</div><br =
class=3D"m_5720800219487051111Apple-interchange-newline"></div></div><div
=
class=3D""><div class=3D""><div
class=3D"h5"><div =
style=3D"word-wrap:break-word" class=3D"">Ok, I found where
it's slow, =
it's a ldapsearch on our AD:<div class=3D""><br
class=3D""></div><div =
class=3D""><div =
style=3D"margin:0px;font-size:11px;line-height:normal;font-family:Menlo" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">time ldapsearch -a never -E pr=3D100/noprompt -H <a =
class=3D"">ldap://ad1</a> -b DC=3D... -s sub =
'(&(groupType:1.2.840.113556.<wbr class=3D"">1.4.803:=3D<a
=
href=3D"tel:(214)%20748-3648" value=3D"+12147483648"
target=3D"_blank" =
class=3D"">2147483648</a>)(&(<wbr =
class=3D"">objectCategory=3Dgroup)(member:<wbr =
class=3D"">1.2.840.113556.1.4.1941:=3D<wbr
class=3D"">userdn)))' =
objectGUID name description</span></div><br
class=3D""></div><div =
class=3D""><div style=3D"margin:0px;line-height:normal"
class=3D""><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""># numResponses: 70</span></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""># numEntries: 66</span></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""># numReferences: 3</span></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal;mi=
n-height:13px" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D""></span><br=
class=3D""></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">real<span
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m10.801s</span></div><div
=
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">user<span
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m0.007s</span></div><div
=
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">sys<span
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m0.012s</span></div><div
=
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""><br class=3D""></span></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">That matches the log line:</span></div><div =
style=3D"margin:0px;line-height:normal" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D""><div =
style=3D"margin:0px;line-height:normal" class=3D""><font
face=3D"Menlo" =
class=3D""><span style=3D"font-size:11px"
class=3D"">2017-05-12 =
14:22:17,413+02 DEBUG [org.ovirt.engineextensions.<wbr =
class=3D"">aaa.ldap.Framework] (pool-25-thread-2) [] Performing =
SearchRequest 'SearchRequest(baseDN=3D'...', scope=3DSUB, deref=3DNEVER, =
sizeLimit=3D0, timeLimit=3D0, filter=3D'&(objectCategory=3D<wbr =
class=3D"">group)(groupType:1.2.840.<wbr =
class=3D"">113556.1.4.803:=3D2147483648)(<wbr =
class=3D"">member:1.2.840.113556.1.4.<wbr
class=3D"">1941:=3D...)', =
attrs=3D{objectGUID, name, description}, con</span></font><span =
style=3D"font-size:11px;font-family:Menlo"
class=3D"">trols=3D{<wbr =
class=3D"">SimplePagedResultsControl(<wbr
class=3D"">pageSize=3D100, =
isCritical=3Dfalse)})' request on server =
'...'</span></div></span></div><div =
style=3D"margin:0px;line-height:normal" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures;font-size:11px" =
class=3D""><font face=3D"Menlo" class=3D""><div
=
style=3D"margin:0px;line-height:normal" class=3D"">2017-05-12 =
14:22:24,456+02 DEBUG [org.ovirt.engineextensions.<wbr =
class=3D"">aaa.ldap.Framework] (pool-25-thread-1) [] SearchResult: =
SearchResult(resultCode=3D0 (success), messageID=3D3, =
entriesReturned=3D66, referencesReturned=3D0, responseControls=3D{<wbr =
class=3D"">SimplePagedResultsControl(<wbr
class=3D"">pageSize=3D0, =
isCritical=3Dfalse)})</div></font></span></div><div =
style=3D"font-family:Menlo;font-size:11px" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D""><br =
class=3D""></span></div><div
style=3D"font-family:Menlo;font-size:11px" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""><br class=3D""></span></div><div =
style=3D"font-family:Menlo;font-size:11px" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures" class=3D"">And
=
without </span>1.2.840.113556.1.4.<wbr
class=3D"">1941</div><div =
style=3D"font-family:Menlo;font-size:11px" class=3D""><br =
class=3D""></div><div
style=3D"font-family:Menlo;font-size:11px" =
class=3D""><div style=3D"margin:0px;line-height:normal"
class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures" class=3D"">#
=
numResponses: 54</span></div><div
style=3D"margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D""># numEntries: 50</span></div><div =
style=3D"margin:0px;line-height:normal" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures" class=3D"">#
=
numReferences: 3</span></div><div =
style=3D"margin:0px;line-height:normal;min-height:13px"
class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D""></span><br=
class=3D""></div><div
style=3D"margin:0px;line-height:normal" =
class=3D""><span
style=3D"font-variant-ligatures:no-common-ligatures" =
class=3D"">real<span
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m0.051s</span></div><div
=
style=3D"margin:0px;line-height:normal" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D"">user<span =
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m0.008s</span></div><div
=
style=3D"margin:0px;line-height:normal" class=3D""><span =
style=3D"font-variant-ligatures:no-common-ligatures"
class=3D"">sys<span =
class=3D"m_5720800219487051111Apple-tab-span" =
style=3D"white-space:pre-wrap"> </span>0m0.007s</span></div><div
=
style=3D"margin:0px;line-height:normal" class=3D""><br =
class=3D""></div></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D"">So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow,
=
but without it, the result is not the same. But I don't know if it's an =
AD or ovirt problem. I'll keep investigating.</div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D""><br class=3D""></div><div =
style=3D"font-family:Menlo;font-size:11px;margin:0px;line-height:normal" =
class=3D"">Thank's for your =
help.</div></div></div></div></div></div><span =
class=3D"">______________________________<wbr =
class=3D"">_________________<br class=3D"">Users mailing
list<br =
class=3D""><a href=3D"mailto:Users@ovirt.org"
target=3D"_blank" =
class=3D"">Users(a)ovirt.org</a><br class=3D""><a =
href=3D"http://lists.ovirt.org/mailman/listinfo/users"
target=3D"_blank" =
class=3D"">http://lists.ovirt.org/<wbr =
class=3D"">mailman/listinfo/users</a><br =
class=3D""></span></div></blockquote></div><br =
class=3D""></div></div></blockquote></div><br
class=3D""></div>
_______________________________________________<br class=3D"">Users =
mailing list<br class=3D""><a href=3D"mailto:Users@ovirt.org"
=
class=3D"">Users(a)ovirt.org</a><br =
class=3D"">http://lists.ovirt.org/mailman/listinfo/users<br =
class=3D""></div></blockquote></div><br =
class=3D""></div></div></body></html>=
--Apple-Mail=_53EF95BA-A328-418F-B475-452AAD552109--