-
Story
-
Resolution: Unresolved
-
Major
-
rhel-8.10.z, rhel-9.8, rhel-10.2
-
None
-
Important
-
rhel-idm
-
None
-
False
-
False
-
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
When user is a member of many groups (think of 5k or more), handling of `BE_REQ_INITGROUPS` (triggered by, for example, `id $user`) by generic SSSD LDAP backend (this ticket is specifically about RFC2307 setup, i.e. no nested groups) takes extremely long time (can be several mins). With membership large enough this can even exceed `SBUS_MESSAGE_TIMEOUT`, making 'sssd_nss' to abort client's request (so `id` returns nothing).
The purpose of this ticket is to track measurable performance improvements of described scenario.
- is cloned by
-
RHEL-150439 Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups) [rhel-9]
-
- Planning
-