X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=tOwE71wp/ulk2oKLOAfY3wIBeQunXObbfgpDKESP40lokUTBXO/vC
	fbcrOGIVxbOQij3iAJFLWI7kh4Eb47JaZRLNfVXHD0B5jwYuZILYk744Pe31R6BC
	kUQvDwP8xxvzXJK+iJSnKCy0C8ljwIttAm4xMmOjFh88AXxkNb3a8o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=ewyidYrcJJjNLBSe7d0l8LOQdDw=; b=Z8qEDeqGblcQowevegJ3llhcn3q0
	6CP1l2IzT8H1ySeSfZqXVTZbKtMxM5XG41H/VLkVVkura2K8vKxyvNAWR2iNGN4l
	cdoDxl7bGVU7uPdnw0nyVnTTj9NhrwsIA3Bn1zn48TdFQMe3+VobvrlF8HKCIfc/
	GUUXusPaXJ+jpwM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.0 required=5.0 tests=AWL,BAYES_20 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Wed, 18 Feb 2015 13:52:30 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: slow startup after upgrade
Message-ID: <20150218125230.GA30611@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150216210132 DOT GM8493 AT calimero DOT vinschen DOT de> <7C9A9F7AB74D423499279676D7FA905A AT Tamar> <20150217213255 DOT GC4340 AT calimero DOT vinschen DOT de> <20150218111802 DOT GM8493 AT calimero DOT vinschen DOT de> <7011F01FD056AE4083D6B2DBB3F2DAFF280C9A5E AT EXMBX16 DOT thus DOT corp>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="mYCpIKhGyMATD0i+"
Content-Disposition: inline
In-Reply-To: <7011F01FD056AE4083D6B2DBB3F2DAFF280C9A5E@EXMBX16.thus.corp>
User-Agent: Mutt/1.5.23 (2014-03-12)

--mYCpIKhGyMATD0i+
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Roger,

On Feb 18 11:26, Roger Orr wrote:
> Hello Corinna,
>=20
> I've just been trying out both the 2015-02-18 10:30:19/44 UTC and
> 2015-02-17 21:27:23/48 UTC patches.
>=20
> Both are now down to the same timings as with a 'files' entry in
> /etc/nsswitch.cfg, (and there's no detectable speed difference between
> them.)
>=20
> The scope restriction in the second query to \System reduces the query
> time to 1.1 - 1.3 ms (was 4 seconds)

Wow!  That's what I had hoped for but it's really incredible to read that.

> and also it no longer opens 14
> TCP/IP sessions to various ldap servers around the planet (!)

Uh, that might be the result of the other changes which don't open an
LDAP connection to fetch group info.  14 connections probably means,
you're in 14 groups in other domains than your login domain.

> I note that mkpasswd and mkgroup do still open many sessions to the
> ldap servers, but that may be inevitable.

Cygwin is using a bulk LDAP request, fetching 100 entries in each call.
I'm not quite sure how all that works under the LDAP library hood, but
one one hand mkpasswd/mkgroup need to make a lot of requests if you
enumerate your entire organization, and every domain needs its own
connection.

> It's not an issue directly,
> of course, since I'll no longer need to make use of these, but it
> perhaps might indicate another place where the ldap queries are
> sub-optimal.

The enumeration queries got the same treatment, so I assume this is
really just a result of having to enumerate all the domains.

> Thanks for your rapid response on this issue!

Same to you!  I'm glad to get testers in such big environments since, as
I said, it's kinda hard to test big stuff in a tiny domain like mine at
home :}

Final question:  Given the above improvement, are you going to run in
"db" only setting for the time being?  That would make some good long
time test... :)


Thanks a bunch,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--mYCpIKhGyMATD0i+
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBAgAGBQJU5IsOAAoJEPU2Bp2uRE+gAz0P/iQpxzvXFX5U7KDi5+SHvc0G
tUTmhY8iVeDsm4kSwCHVvNwce0HZYWxw1GeqG9bjBb3TMbjYztj3DRf3oHPQGmkD
LkMO6BxXVRwt8KFtHm8nIfZdkYbR/pYmpAKW4hnDaWKk7t5/EaaJGa9TvYvfj+ql
BYuYOXeFpOUxFDHAACrsWu+zQvp1AqWvHeoWVTC6fiwwTVpl1t1w3YcnLnQGqWOH
x3gcInwXM7PVQOZ2lBjZYWMbCq1y0JtCr1OwWfw9VVEjX8ezE1YVDVyu3CVjBNT7
zQ8caDV9UWCQlzxBnroVK68s/dCE04V2QcOuv2Ixutlux2147gv/InrboZcRuCM1
bThEZOS6dMrBvMkLI3hxQQPGtNVQrEZ5LpHkLgasnRO5brOXat4xq9Fq+3xljmut
1zr/3FYW9pQJI2TVGkfOu8pwt05WiRnxSv1ud5T/D8l1K8QeL0g0uYqvrKwoCt5g
oDLLp6B75BN+wCdZJg7jGAH76iJeNIt51W5sCB8VoTbZiidACMKKY/Sas9FBHVUV
7fYuhhps6JD4FlT4Kb/1evGSqVC03/eZKYjQU5eYuLmzCQvtFzb8Q4r31sEYN6E+
sgXeAKZbxI2safjjDJri8BCc4Q4+9opV+Y2bsMrsKMYn6ms2KVE7Wg4vdfQ7I4uJ
vi1XQg5K/9163u26esdn
=7dtc
-----END PGP SIGNATURE-----

--mYCpIKhGyMATD0i+--