Bug 50006 - univention-radius-ntlm-auth is slow with big ldap directories
univention-radius-ntlm-auth is slow with big ldap directories
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Radius
UCS 4.4
Other Linux
: P5 normal (vote)
: UCS 4.4-1-errata
Assigned To: Jürn Brodersen
Arvid Requate
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2019-08-13 17:38 CEST by Jürn Brodersen
Modified: 2019-11-12 08:48 CET (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.206
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019080221000612
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jürn Brodersen univentionstaff 2019-08-13 17:38:28 CEST
univention-radius-ntlm-auth is slow with big ldap directories

The time it takes for "import univention.admin.filter" to finish, depends on the size of the ldap directory.

I switched to filter_format from "ldap.filter"

In my test environment, with 2500 students, that improved the runtime of "univention-radius-check-access" from 1.2sec to 0.12sec.
Comment 1 Jürn Brodersen univentionstaff 2019-08-13 18:06:43 CEST
[4.4-1 645b9d13dd] Bug #50006: Improve performance in large environments
[4.4-1 08bc57420d] Bug #50006: yaml

Package: univention-radius
Version: 6.0.2-10A~4.4.0.201908131800
Branch: ucs_4.4-0
Scope: errata4.4-1
Comment 2 Jürn Brodersen univentionstaff 2019-08-15 10:31:41 CEST
The new package doesn't install the python modules?
I guess the package needs to be converted to dh-python
Comment 3 Jürn Brodersen univentionstaff 2019-08-19 16:23:03 CEST
[4.4-1 60c12248ac] Bug #50006: move python files for pybuild
[4.4-1 cab1724ef8] Bug #50006: Switch to dh_python using pybuild
[4.4-1 52a869d3d0] Bug #50006: changelog
[4.4-1 eabd2531a5] Bug #50006: yaml
[4.4-1 23b730d353] Bug #50006: yaml

successful build
Package: univention-radius
Version: 6.0.2-11A~4.4.0.201908191534
Branch: ucs_4.4-0-errata4.4-1
Scope: errata4.4-1
Comment 4 Jürn Brodersen univentionstaff 2019-08-19 17:56:30 CEST
And I broke the upgrade path, sorry

Fixed in:
[4.4-1 517fcad23c] Bug #50006: Move python-univention-radius.links into univention-radius.links
[4.4-1 b7ff5221e8] Bug #50006: yaml

Package: univention-radius
Version: 6.0.2-12A~4.4.0.201908191754
Branch: ucs_4.4-0
Scope: errata4.4-1
Comment 5 Arvid Requate univentionstaff 2019-08-20 10:53:03 CEST
This doesn't fit with the new lines your added to services/univention-radius/debian/univention-radius.links via commit cab1724ef8:

root@master10:~# ls -ld /usr/lib/pymodules/python2.7/univention/radius/__init__.py
ls: Zugriff auf '/usr/lib/pymodules/python2.7/univention/radius/__init__.py' nicht möglich: Datei oder Verzeichnis nicht gefunden

root@master10:~# dpkg -l python-univention-radius | tail -1
ii  python-univention-radius 6.0.2-12A~4.4.0.201908191754 amd64 

Could you check this?
Comment 6 Erik Damrose univentionstaff 2019-08-20 12:50:14 CEST
QA: Please make sure the test 20_appcenter.20_can_apps_be_installed does not fail on any system role due to the radius app
Comment 7 Jürn Brodersen univentionstaff 2019-08-20 14:24:00 CEST
(In reply to Erik Damrose from comment #6)
> QA: Please make sure the test 20_appcenter.20_can_apps_be_installed does not
> fail on any system role due to the radius app

The new python-univention-radius binary package was not marked as maintained
-> Done
Comment 8 Jürn Brodersen univentionstaff 2019-08-20 14:26:50 CEST
(In reply to Erik Damrose from comment #6)
> QA: Please make sure the test 20_appcenter.20_can_apps_be_installed does not
> fail on any system role due to the radius app

Good catch! In retrospect it might have been easier to debug the pysupport issue :(

[4.4-1 9109b51b90] Bug #50006: Add python module dirs for ucs@school
[4.4-1 b1053323e3] Bug #50006: fix backwards compatibility with pysupport
[4.4-1 1a033910af] Bug #50006: yaml

successful build
Package: univention-radius
Version: 6.0.2-14A~4.4.0.201908201322
Branch: ucs_4.4-0-errata4.4-1
Scope: errata4.4-1
Comment 9 Arvid Requate univentionstaff 2019-08-20 16:35:48 CEST
Verified:
* Code review
* ucs-test-radius
* univention-radius-check-access works
* Advisory
Comment 10 Arvid Requate univentionstaff 2019-08-22 15:30:16 CEST
<http://errata.software-univention.de/ucs/4.4/237.html>