X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=QouK6lTuKZxWR9bsui+FIGwg37mHvZr639XlSigq9DCr0TciVmlqg
	adZnDn3dXaLLI7TaK0hqaSrESQEO+hwikHL2tS4PPb8xR4EbNN1GcIQTXUtYcE3s
	SbVx/8aJsZywqq//xvXmHTFd/gXoQPtqVlIEKhIcUbtnpbeS8ZdPpg=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=9+0s3RR6d10+6lXjlo3DVD10mIg=; b=Oi0gsS/0kHDGusmaUXGFpvENMRui
	VwbfTakYmQup9+oot9SWY6AmCbW/1ms01ZMM+XyxRPMzNphKbcrBc4kVmag1Kltj
	Pd8Mdd6DMArJoQepeqHdr+DKT5Ob3pCVMWvuevLMas53MZghSP3hY0AESiXE71Yn
	1W8DS6NYCGdIieE=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-4.1 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Mon, 26 Oct 2015 11:07:56 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.3.0-0.4
Message-ID:	<20151026100756.GC31990@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<announce DOT 20151022162227 DOT GC5319 AT calimero DOT vinschen DOT de> <loom DOT 20151023T153449-500 AT post DOT gmane DOT org>
MIME-Version:	1.0
In-Reply-To:	<loom.20151023T153449-500@post.gmane.org>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--V88s5gaDVPzZ0KCq
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Oct 23 14:01, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > There's, as usual, a downside: AuthZ leans a bit to the slow side.
>=20
> It's not too bad, as long as your network connection is fast (and fast me=
ans
> short roundtrip time for an AD query).  If I take each page fault as
> reported by time as a proxy for an AD access, then it needs about three
> times more roundtrips to the AD.
>=20
> On a server with almost perfect connectivity to the AD that increases the
> wall-time of listing a very large directory with directories/files from m=
any
> users (about a quarter of all users in the AD, and not all from the local
> domain) from 8 to 10 minutes.  The CPU time as well as the network traffic
> is neglible in both cases.
>=20
> On my local laptop things look a bit different, a small ~5% subset of the
> test above goes from 20s to 200s and a different larger ~10% subset from =
50s
> to 500s.

Erm, really?  I tested this locally with a directory with hundreds
of files, each of which belonged to another user or group, and that
resulted in a 25% slowdown.  Not 1000%.  Oh boy.

> While that hurts, the more usual case with many files from the
> same user doesn't feel any slower at the moment.  The access through VPN
> will be interesting, though...

Did you try this in the meantime?

Given the above result, I'm wondering if we can afford using AuthZ at
all.  OTOH I don't see any other way to get the correct POSIX permissions
from a non-Cygwin ACL :(


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--V88s5gaDVPzZ0KCq
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWLft7AAoJEPU2Bp2uRE+gzmkP/iH3Odh+aAKSqPuE7gotm+zX
Gowr0LbD6DHYxonGPGex+4NUu+z6LiscTm8eVMNJA9G+Myn4I2Vwza9i5uIb78yN
0fy1GAblD6PvhsnM8pnk8MezTpxcCdkaIkbxxYI4p/g7MMP3oCz/XTL91T+YY0rm
BDr86Vfm5CJOUm/lgD+MmQm842FI/GzQ7evT6vc2poF3B6U8EbYajJCKpoUkxNxs
qLhTK/Xq9PbWsS3wdOTwjIysv6wAm11LZFQaeBMRioTswh/wrfvNvK/nbdGJLcgf
i8U+bULXTDCIJj7490eLWPdsDkte2ITRil7gbme3epGWlDzmTOreAbiCipjoYewl
ZMAbe2dyQmGzLjIM9hODoBtjcNiOahQJBTlfh70CAl8QHxU7EjKQoMLoEzhWZq/X
OdDkKlabYyxWeHRtI6Pk+ivvPzqhycsOzBObYqndS4HCLxiVqH4/7rSbkEWzLZ6c
DcMNWZywYqWx6DgfBdobhbudy1RbYBVzmt8tU5rBkdEZICiAB/4//XQEElO5hWVJ
/AzqP2PLCKK1D9mis9qKNbzdS2lIcTSpF8tUek82mOHp5OT/bH9v7DpZf918Uxbm
5qsm0MMWPZ6wvrDyIL6uC63Qaz0aqoB8pgJzXaazke828XURCGD1dnIWg5LYRQng
XuGaCEGSnqYAuCcFbW00
=8+oO
-----END PGP SIGNATURE-----

--V88s5gaDVPzZ0KCq--

- Raw text -