<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
It’s a very easy switch, and you could do it on earlier versions of RedHat if you want to eliminate that as a change on upgrade.
<div><br>
</div>
<div>FWIW, my favorite SSSD debug level for running in production is 0x0180. <br>
<br>
<div id="AppleMailSignature" dir="ltr"><span style="background-color: rgba(255, 255, 255, 0);">--<br>
____<br>
|| \\UTGERS, |---------------------------*O*---------------------------<br>
||_// the State | Ryan Novosielski - <a href="mailto:novosirj@rutgers.edu" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="1">novosirj@rutgers.edu</a><br>
|| \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus<br>
|| \\ of NJ | Office of Advanced Research Computing - MSB C630, Newark<br>
`'</span></div>
<div dir="ltr"><br>
On Oct 26, 2018, at 23:12, Skylar Thompson <<a href="mailto:skylar.thompson@gmail.com">skylar.thompson@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr"><span>Good to know - we're still nslcd users so have yet to run into that, though</span><br>
<span>are about to make the leap to CentOS 7 where I think we will have to use</span><br>
<span>it.</span><br>
<span></span><br>
<span>On Sat, Oct 27, 2018 at 03:13:47AM +0100, John Hearns via Beowulf wrote:</span><br>
<blockquote type="cite"><span> Skylar, I believe that nscd does not work well with sssd and I disabled</span><br>
</blockquote>
<blockquote type="cite"><span> it.</span><br>
</blockquote>
<blockquote type="cite"><span> See [1]<a href="https://access.redhat.com/documentation/en-us/red_hat_enterprise">https://access.redhat.com/documentation/en-us/red_hat_enterprise</a></span><br>
</blockquote>
<blockquote type="cite"><span> _linux/6/html/deployment_guide/usingnscd-sssd</span><br>
</blockquote>
<blockquote type="cite"><span> I believe that nscd is the work of Auld Nick himself and causes more</span><br>
</blockquote>
<blockquote type="cite"><span> problems than it is worth on HPC nodes.</span><br>
</blockquote>
<blockquote type="cite"><span> If you want to speed up cacheing with sssd itself you can put its local</span><br>
</blockquote>
<blockquote type="cite"><span> caches on a RAMdisk. This has the cost of no persistence of course and</span><br>
</blockquote>
<blockquote type="cite"><span> uses up RAM which you may prefer to put to better use.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span> On Sat, 27 Oct 2018 at 00:59, Skylar Thompson</span><br>
</blockquote>
<blockquote type="cite"><span> <[2]<a href="mailto:skylar.thompson@gmail.com">skylar.thompson@gmail.com</a>> wrote:</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span> On Fri, Oct 26, 2018 at 08:44:28PM +0000, Ryan Novosielski wrote:</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>Our LDAP is very small, compared to the sorts of things some</span><br>
</blockquote>
</blockquote>
<blockquote type="cite"><span> people run.</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>We added indexes today on uid, uidNumber, and gidNumber and the</span><br>
</blockquote>
</blockquote>
<blockquote type="cite"><span> problem went away. Didn’t try it earlier as it had virtually no</span><br>
</blockquote>
<blockquote type="cite"><span> impact on our testing system for whatever reason, but on a different</span><br>
</blockquote>
<blockquote type="cite"><span> testing system and on production, it dropped “ls -al /home/“ from</span><br>
</blockquote>
<blockquote type="cite"><span> ~90s to ~5s. I’m not sure if all three were necessary, but I’ll look</span><br>
</blockquote>
<blockquote type="cite"><span> back at that later.</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>We’ve run SSSD from day one, so that eliminates the nscld</span><br>
</blockquote>
</blockquote>
<blockquote type="cite"><span> question. We also moved CentOS 5.x to SSSD, FYI (I believe there was</span><br>
</blockquote>
<blockquote type="cite"><span> someone else with some old systems around). Was pretty painless, and</span><br>
</blockquote>
<blockquote type="cite"><span> SSSD eliminates a lot of problems that exist with the older stuff</span><br>
</blockquote>
<blockquote type="cite"><span> (including some really boneheaded very large LDAP queries that were</span><br>
</blockquote>
<blockquote type="cite"><span> happening routinely with the older nss-ldap software if I’m</span><br>
</blockquote>
<blockquote type="cite"><span> remembering its name correctly).</span><br>
</blockquote>
<blockquote type="cite"><span> Have you experimented with client-side caching services like nscd?</span><br>
</blockquote>
<blockquote type="cite"><span> nscd has</span><br>
</blockquote>
<blockquote type="cite"><span> its quirks (in particular, it does very poorly with caching spurious</span><br>
</blockquote>
<blockquote type="cite"><span> negative</span><br>
</blockquote>
<blockquote type="cite"><span> results from transient network failures), but it also is a big</span><br>
</blockquote>
<blockquote type="cite"><span> performance</span><br>
</blockquote>
<blockquote type="cite"><span> improvement since you don't even have to hit the network or the</span><br>
</blockquote>
<blockquote type="cite"><span> directory</span><br>
</blockquote>
<blockquote type="cite"><span> services.</span><br>
</blockquote>
<blockquote type="cite"><span> --</span><br>
</blockquote>
<blockquote type="cite"><span> Skylar</span><br>
</blockquote>
<blockquote type="cite"><span> _______________________________________________</span><br>
</blockquote>
<blockquote type="cite"><span> Beowulf mailing list, [3]<a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a> sponsored by Penguin</span><br>
</blockquote>
<blockquote type="cite"><span> Computing</span><br>
</blockquote>
<blockquote type="cite"><span> To change your subscription (digest mode or unsubscribe) visit</span><br>
</blockquote>
<blockquote type="cite"><span> [4]<a href="http://www.beowulf.org/mailman/listinfo/beowulf">http://www.beowulf.org/mailman/listinfo/beowulf</a></span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>References</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span> 1. <a href="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/usingnscd-sssd">
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/usingnscd-sssd</a></span><br>
</blockquote>
<blockquote type="cite"><span> 2. <a href="mailto:skylar.thompson@gmail.com">mailto:skylar.thompson@gmail.com</a></span><br>
</blockquote>
<blockquote type="cite"><span> 3. <a href="mailto:Beowulf@beowulf.org">mailto:Beowulf@beowulf.org</a></span><br>
</blockquote>
<blockquote type="cite"><span> 4. <a href="http://www.beowulf.org/mailman/listinfo/beowulf">
http://www.beowulf.org/mailman/listinfo/beowulf</a></span><br>
</blockquote>
<span></span><br>
<blockquote type="cite"><span>_______________________________________________</span><br>
</blockquote>
<blockquote type="cite"><span>Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org">
Beowulf@beowulf.org</a> sponsored by Penguin Computing</span><br>
</blockquote>
<blockquote type="cite"><span>To change your subscription (digest mode or unsubscribe) visit
<a href="http://www.beowulf.org/mailman/listinfo/beowulf">http://www.beowulf.org/mailman/listinfo/beowulf</a></span><br>
</blockquote>
<span></span><br>
<span></span><br>
<span>-- </span><br>
<span>Skylar</span><br>
<span>_______________________________________________</span><br>
<span>Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a> sponsored by Penguin Computing</span><br>
<span>To change your subscription (digest mode or unsubscribe) visit <a href="http://www.beowulf.org/mailman/listinfo/beowulf">
http://www.beowulf.org/mailman/listinfo/beowulf</a></span><br>
</div>
</blockquote>
</div>
</body>
</html>