[Beowulf] Poll - Directory implementation

[Prentice Bisbal]

On 10/24/2018 04:33 PM, Ryan Novosielski wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 10/24/2018 03:51 PM, Prentice Bisbal via Beowulf wrote:
>> On 10/24/2018 01:50 PM, Ryan Novosielski wrote:
>>
>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>>>
>>> On 10/24/2018 01:44 PM, Michael Di Domenico wrote:
>>>
>>>> i don't want to diverge this thread from the OP, but how fast
>>>> does ldap really need to be?  i have ~700 machines talking to
>>>> two openldap servers w/ ssl enabled.  we have to run nslcd on
>>>> the clients, but all is well
>>> It's somewhat relevant, given someone's consideration of
>>> migration.
>>>
>>> Faster than ours! We have a single at the moment (the VM is
>>> movable so we don't really need it for high availability), but we
>>> are having problems with certain operations (like ls -la /home).
>>> Our case appears as if it might be related to our VM
>>> infrastructure or some tuning parameter that is very wrong. I've
>>> done the usual things (indexing on uidNumber and gidNumber, etc.)
>>> but haven't had a ton of luck so far.
>> I have to ask the obvious question, which you probably did
>> already:
>>
>> Did you do an 'ls -lna' and compare that to 'ls -la'?
> Yup, the former is instantaneous, the latter tens of seconds (hence
> blaming LDAP).
I'd say that's pretty conclusive. Are you using sssd or nslcd or 
something else? What happens when you use ldapsearch directly to query 
LDAP? Do you see slowness in that case, too?

--
Prentice