Hi all, I have been testing sssd - i.e. enumerating groups as per RFC2307bis (AD schema) in our (fairly large) organization and here are the results:
sssd 1.5.1 - 5:08 minutes sssd 1.8.3 - 1:24 minutes Centrify (commercial product) - 34 seconds
The performance gain between sssd 1.5.1 and 1.8.3 is obvious, but it is still far behind a commercial product Centrify. Note that when computing the groups membership, Centrify also considers the AD-specific 'PrimaryGroupID' attribute - this is something sssd can not do yet.
Ondrej
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited. Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18
On Tue, 2012-05-29 at 11:39 +0200, Ondrej Valousek wrote:
Hi all, I have been testing sssd - i.e. enumerating groups as per RFC2307bis (AD schema) in our (fairly large) organization and here are the results:
sssd 1.5.1 - 5:08 minutes sssd 1.8.3 - 1:24 minutes Centrify (commercial product) - 34 seconds
The performance gain between sssd 1.5.1 and 1.8.3 is obvious, but it is still far behind a commercial product Centrify. Note that when computing the groups membership, Centrify also considers the AD-specific 'PrimaryGroupID' attribute - this is something sssd can not do yet.
I'd like to know what methodology you used to test all of this. It would be useful to have some example data. Obviously, we are always working hard towards improving our performance. Our mantra has always been "Get it right first, fast second".
As for the PrimaryGroupID attribute, this will be handled by SSSD 1.9.0 as part of the ID-mapping support, the first beta of which is available now upstream.
sssd-users@lists.fedorahosted.org