<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">It works much better now. Goes from 6s to less than 500ms. Not blazing fast but much more usable, thanks a lot.<div class=""><br class=""><div class=""><div><blockquote type="cite" class=""><div class="">Le 12 mai 2017 à 15:58, Ondra Machacek <<a href="mailto:omachace@redhat.com" class="">omachace@redhat.com</a>> a écrit :</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class="">This is new feature in aaa-ldap tracked here[1].<br class=""></div>By default for AD profiles we use this feature, and it should<br class=""></div>increase performance in most cases.<br class=""><br class=""></div>But if this is not the case for you, can you just try to change the profile<br class=""></div>from:<br class=""><br class=""> include = <ad.properties><br class=""><br class=""></div>to<br class=""><br class=""> include = <ad-recursive.properties><br class=""><br class=""></div>And see if it will be better?<br class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><br class="">[1] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1393407" class="">https://bugzilla.redhat.com/show_bug.cgi?id=1393407</a><br class=""></div></div></div></div></div></div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Fri, May 12, 2017 at 2:54 PM, Fabrice Bacchella <span dir="ltr" class=""><<a href="mailto:fabrice.bacchella@orange.fr" target="_blank" class="">fabrice.bacchella@orange.fr</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class="">I found that:<div class=""><br class=""></div><div class=""><a href="http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx" target="_blank" class="">http://dunnry.com/blog/<wbr class="">TransitiveLinkValueFilterEvalu<wbr class="">ation.aspx</a></div><div class=""><br class=""></div><div class=""><br class=""><div class=""><blockquote type="cite" class=""><div class=""><div class="h5"><div class="">Le 12 mai 2017 à 14:44, Fabrice Bacchella <<a href="mailto:fabrice.bacchella@orange.fr" target="_blank" class="">fabrice.bacchella@orange.fr</a>> a écrit :</div><br class="m_5720800219487051111Apple-interchange-newline"></div></div><div class=""><div class=""><div class="h5"><div style="word-wrap:break-word" class="">Ok, I found where it's slow, it's a ldapsearch on our AD:<div class=""><br class=""></div><div class=""><div style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">time ldapsearch -a never -E pr=100/noprompt -H <a class="">ldap://ad1</a> -b DC=... -s sub '(&(groupType:1.2.840.113556.<wbr class="">1.4.803:=<a href="tel:(214)%20748-3648" value="+12147483648" target="_blank" class="">2147483648</a>)(&(<wbr class="">objectCategory=group)(member:<wbr class="">1.2.840.113556.1.4.1941:=<wbr class="">userdn)))' objectGUID name description</span></div><br class=""></div><div class=""><div style="margin:0px;line-height:normal" class=""><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numResponses: 70</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numEntries: 66</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numReferences: 3</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal;min-height:13px" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></span><br class=""></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">real<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m10.801s</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">user<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m0.007s</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">sys<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m0.012s</span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">That matches the log line:</span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><div style="margin:0px;line-height:normal" class=""><font face="Menlo" class=""><span style="font-size:11px" class="">2017-05-12 14:22:17,413+02 DEBUG [org.ovirt.engineextensions.<wbr class="">aaa.ldap.Framework] (pool-25-thread-2) [] Performing SearchRequest 'SearchRequest(baseDN='...', scope=SUB, deref=NEVER, sizeLimit=0, timeLimit=0, filter='&(objectCategory=<wbr class="">group)(groupType:1.2.840.<wbr class="">113556.1.4.803:=2147483648)(<wbr class="">member:1.2.840.113556.1.4.<wbr class="">1941:=...)', attrs={objectGUID, name, description}, con</span></font><span style="font-size:11px;font-family:Menlo" class="">trols={<wbr class="">SimplePagedResultsControl(<wbr class="">pageSize=100, isCritical=false)})' request on server '...'</span></div></span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures;font-size:11px" class=""><font face="Menlo" class=""><div style="margin:0px;line-height:normal" class="">2017-05-12 14:22:24,456+02 DEBUG [org.ovirt.engineextensions.<wbr class="">aaa.ldap.Framework] (pool-25-thread-1) [] SearchResult: SearchResult(resultCode=0 (success), messageID=3, entriesReturned=66, referencesReturned=0, responseControls={<wbr class="">SimplePagedResultsControl(<wbr class="">pageSize=0, isCritical=false)})</div></font></span></div><div style="font-family:Menlo;font-size:11px" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div style="font-family:Menlo;font-size:11px" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div style="font-family:Menlo;font-size:11px" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">And without </span>1.2.840.113556.1.4.<wbr class="">1941</div><div style="font-family:Menlo;font-size:11px" class=""><br class=""></div><div style="font-family:Menlo;font-size:11px" class=""><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numResponses: 54</span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numEntries: 50</span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""># numReferences: 3</span></div><div style="margin:0px;line-height:normal;min-height:13px" class=""><span style="font-variant-ligatures:no-common-ligatures" class=""></span><br class=""></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">real<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m0.051s</span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">user<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m0.008s</span></div><div style="margin:0px;line-height:normal" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">sys<span class="m_5720800219487051111Apple-tab-span" style="white-space:pre-wrap"> </span>0m0.007s</span></div><div style="margin:0px;line-height:normal" class=""><br class=""></div></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class="">So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but without it, the result is not the same. But I don't know if it's an AD or ovirt problem. I'll keep investigating.</div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class=""><br class=""></div><div style="font-family:Menlo;font-size:11px;margin:0px;line-height:normal" class="">Thank's for your help.</div></div></div></div></div></div><span class="">______________________________<wbr class="">_________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" target="_blank" class="">Users@ovirt.org</a><br class=""><a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank" class="">http://lists.ovirt.org/<wbr class="">mailman/listinfo/users</a><br class=""></span></div></blockquote></div><br class=""></div></div></blockquote></div><br class=""></div>
_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class="">http://lists.ovirt.org/mailman/listinfo/users<br class=""></div></blockquote></div><br class=""></div></div></body></html>