Bug 48228 – Loading multiple LDAP objects (>1000) takes too long

Bug 48228 - Loading multiple LDAP objects (>1000) takes too long


Summary:	Loading multiple LDAP objects (>1000) takes too long

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	UMC (Generic)
Version:	UCS 5.0
Hardware:	Other Mac OS X 10.1

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2018-11-28 09:31 CET by Michel Smidt
Modified:	2022-11-09 20:38 CET (History)
CC List:	3 users (show)

See Also:	50240
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.114
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Large environments, UCS Performance
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michel Smidt 2018-11-28 09:31:36 CET

From the usability point of view, loading multiple LDAP objects (>1000) takes too long. 
On a productive system I just had at hand, for example, 35 seconds.
This is of course too long because 1000 objects are quickly reached when loading only one school.
Furthermore, a search limit ("The requested search returned too many results ...") is not accepted in modern environments. Paging in the web environment is used for this purpose. Normally already from 100 users.

Possibly related bugs:
http://forge.univention.org/bugzilla/show_bug.cgi?id=44422
&lt;font color="#ffff00"&gt;http://forge.univention.org/bugzilla/show_bug.cgi?id=44870

Comment 1 Stefan Gohmann

2018-11-28 19:47:32 CET

In a short test it took here 3.5 seconds to open a user list with about 1.000 users. So I guess there is something more specific in the environment.

Can you append log files for UMC / UDM with debug level 4? And maybe you can also set LDAP debug to stats so that we can see which searches took so long. It is also possible than some attribute is not in the index.

Maybe the LDAP ACLs are the problem? Did you search as Administrator?

If it is a problem for the customer, you can also create a support ticket.

Comment 2 Stefan Gohmann

2019-01-03 07:30:47 CET

This issue has been filed against the UCS version "unstable" which does not really exist. Please change the version value.

Comment 3 Daniel Tröder

2019-01-21 12:03:19 CET

Performance depends stringly on the ACLs traversed.

Tests must be done with both cn=admin and non-cn=admin accounts (in school context teacher account).

Comment 4 Daniel Tröder

2019-01-21 12:10:17 CET

In UCS@school we just reduced the loading time of a UMC module massively by using direct LDAP lookups and not using UDM: Bug #47885.