Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-5151

[RFE] defer memberof nested updates

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • 389-ds-base-2.6.1-1.el9
    • None
    • ZStream
    • rhel-idm-ds
    • ssg_idm
    • 26
    • 0
    • QE ack, Dev ack
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Approved Blocker
    • Enhancement
    • Hide
      .The new `memberOfDeferredUpdate: on/off` configuration attribute is now available in Directory Server

      With this update, Directory Server introduces the new `memberOfDeferredUpdate` configuration attribute for the MemberOf plug-in. When set to `on`, the MemberOf plug-in defers the update of group members resulting in improved server responsiveness, especially if the group changes impact a large number of its members.

      For details, see link:https://docs.redhat.com/en/documentation/red_hat_directory_server/12/html/configuration_and_schema_reference/plug_in_implemented_server_functionality_reference#memberofdeferredupdate_assembly_memberof-plug-in[memberOfDeferredUpdate] in the RHDS 12 Configuration and schema reference documentation.
      Show
      .The new `memberOfDeferredUpdate: on/off` configuration attribute is now available in Directory Server With this update, Directory Server introduces the new `memberOfDeferredUpdate` configuration attribute for the MemberOf plug-in. When set to `on`, the MemberOf plug-in defers the update of group members resulting in improved server responsiveness, especially if the group changes impact a large number of its members. For details, see link: https://docs.redhat.com/en/documentation/red_hat_directory_server/12/html/configuration_and_schema_reference/plug_in_implemented_server_functionality_reference#memberofdeferredupdate_assembly_memberof-plug-in [memberOfDeferredUpdate] in the RHDS 12 Configuration and schema reference documentation.
    • Done
    • None
    • 57,005

      Description of problem:
      When memberof plugin is enabled, an update of a group can trigger many nested updates of its members. The value of 'memberof' is changed in those members. As a consequence many database pages associated to the index 'memberof' are held (write) by the parent TXN (update of the group).

      Any search request, that need access to those pages (i.e. filter contains (memberof=cn=my_group,dc=com)) is stuck until the update TXN commits.

      If the number of such searches requests is as high as the number of workers, all workers may be busy+locked until the TXN commits. During that time the server may receive new requests that will not be processed until the TXN commits. As a consequence the LDAP server appears unresponsive.

      Version-Release number of selected component (if applicable):
      All versions RHEL7/8/9

      How reproducible:
      Systematically. See next update

      Actual results:
      The server becomes unresponsive

      Expected results:
      The server should stay responsive

              tbordaz@redhat.com Thierry Bordaz
              tbordaz@redhat.com Thierry Bordaz
              IdM DS QE
              Thierry Bordaz Thierry Bordaz
              Barbora Simonova Barbora Simonova
              Evgenia Martyniuk Evgenia Martyniuk
              Votes:
              2 Vote for this issue
              Watchers:
              19 Start watching this issue

                Created:
                Updated:
                Resolved: