https://bugzilla.novell.com/show_bug.cgi?id=878829 https://bugzilla.novell.com/show_bug.cgi?id=878829#c0 Summary: SSSD 1.9.5 very slow with large LDAP groups, please update to 1.9.6 Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: joschibrauchle@gmx.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36 The SSSD service in version 1.9.5 is very slow at logging in users in a large company LDAP setup, where thousands of users and groups exists. The reason being that a group lookup for a single user at login enumerates all group member of these groups, although this information is not required to login the specific user. In SSSD version 1.9.6 a new configuration option "ignore_group_members" has been added to prevent group member lookups when enumerating user groups. See https://fedorahosted.org/sssd/ticket/1376 which is included in version 1.9.6 Hence, please update openSUSE 13.1 from SSSD version 1.9.5 to 1.9.6. The 1.9.6 version has been built on OBS here: https://build.opensuse.org/package/show/home:endzone:branches:openSUSE:13.1:... Test with this version and the new option have been successful (15 seconds for user login w/ 1.9.5 and only 1 second with 1.9.6). Reproducible: Always Steps to Reproduce: 1. Large number of users and groups in LDAP 2. Login with SSSD service enabled Actual Results: Very slow user login as all group members are looked up in LDAP, which is not needed Expected Results: Login should be reasonably fast https://fedorahosted.org/sssd/ticket/1376 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.