Hi,

On Wed, Nov 12, 2025 at 5:09 PM William Oprandi via FreeIPA-users <
[email protected]> wrote:

> I regulary sync my users SQL table (~400 entries) with a OpenLDAP
> instance. The code is simple, first I do a ldap bind and a ldap modify for
> each user without condition. It take around 5 seconds.
> I tested with a fresh FreeIPA instance (with a replica), it take almost
> 100 seconds ! x20 slower
>

FreeIPA has various plugins enabled that may explain the performance
degradation. For instance the memberof plugin (
https://www.port389.org/docs/389ds/design/memberof-plugin.html)  or the
schema compatibility plugin.

You can refer to
https://docs.redhat.com/fr/documentation/red_hat_enterprise_linux/10/html/tuning_performance_in_identity_management/index
for tuning recommendations.
This web page also explains a bit what happens during a user-add:
https://www.freeipa.org/page/V4/Performance_Improvements

flo

Does anyone have an idea that could explain the difference ? I suspected
> the replication, I tested by shutting down the replica before a second test
> but no changes.
> --
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to