Univention Bugzilla – Bug 52682
repeated runs of well-known-sid-name-mapping take very long during AD-Takeover
Last modified: 2021-05-25 16:01:36 CEST
During AD-Takover of a non-english AD (e.g. german) the listener is very slow, because the well-known-sid-name-mapping module repeatedly sets UCR variables that cause slapd.conf to be commited again and again, which is slow due to the way schema extensions are loaded.
Created attachment 10601 [details] Workaround-for-Bug52682.patch We could delay the actual UCR change to the postrun.
This takes the lions share of the time actually required for an AD-Takeover.
c97420d47d Bug #52682: Avoid long delays due to repeated ucr sets 3939483599 Bug #52682: Changelog Package: univention-pam Version: 13.0.3-1A~5.0.0.202101242118 Branch: ucs_5.0-0
Commiting slapd.conf is slow due to Bug #34003 and there is a fix in https://git.knut.univention.de/univention/ucs/-/merge_requests/9.
ec22fb2017 fixup! Avoid set/unset races
The change causes that the following tests are failing: 01_base/96rename_domain_users 01_base/96rename_domain_admins 01_base/95rename_administrator This is because the tests wait for the post run and check the templates for occurrences of the new names. This doesn't happen as committing slapd.conf and dovecot-ldap.conf.ext takes too long then in the postrun, which was prior in the handler()-phase. Julia and I decided to fix Bug #34003 additionally (or instead?).
Seems to work now.
(In reply to Arvid Requate from comment #7) > Seems to work now. Yes, u.a. because we fixed Bug #34003. I am still thinking about reverting the changes. (did a few attempts to make a branch test for git:fbest/52682-revert). Do you have an opinion about this? The code is more complex now, better/faster for multiple-changes, longer for single-changes (needs to wait 15 seconds for postrun).
Yeah, I'm fine with that. I flipped the roles.
(In reply to Arvid Requate from comment #9) > Yeah, I'm fine with that. I flipped the roles. OK, reverted it: univention-pam (13.0.3-2) 64b05c5b9dd8 | Revert "fixup! Bug #52682: Avoid long delays due to repeated ucr sets"
Package: univention-pam Version: 13.0.3-2A~5.0.0.202103091622 Branch: ucs_5.0-0
UCS 5.0 has been released: https://docs.software-univention.de/release-notes-5.0-0-en.html https://docs.software-univention.de/release-notes-5.0-0-de.html If this error occurs again, please use "Clone This Bug".