Re: [SSSD-users] Stress testing sssd - group enumeration

[Stephen Gallagher]

On Tue, 2012-05-29 at 11:39 +0200, Ondrej Valousek wrote:
>  Hi all,
>  I have been testing sssd - i.e. enumerating groups as per RFC2307bis
>  (AD schema) in our (fairly large) organization and here are the
>  results:
>  
>  sssd 1.5.1 - 5:08 minutes
>  sssd 1.8.3 - 1:24 minutes
>  Centrify (commercial product) - 34 seconds
>  
>  The performance gain between sssd 1.5.1 and 1.8.3 is obvious, but it
>  is still far behind a commercial product Centrify.
>  Note that when computing the groups membership, Centrify also
>  considers the AD-specific 'PrimaryGroupID' attribute - this is
>  something sssd can not do yet. 

I'd like to know what methodology you used to test all of this. It would
be useful to have some example data. Obviously, we are always working
hard towards improving our performance. Our mantra has always been "Get
it right first, fast second".

As for the PrimaryGroupID attribute, this will be handled by SSSD 1.9.0
as part of the ID-mapping support, the first beta of which is available
now upstream.