DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=Se4VsZYLOQ6zi3ILo9XObtptzGiOZS11OfrRvdqlFf0iw6d56Yy52
	3YODymz92e59gXDMMDtP6jr3roojd/N/sBPeYtE6jz6/XdGMHc/fiToz1HkyQw24
	xXV935CK6z8e7cFOTm2FswJzLhwyQhKT/RsbcyNZMTDG+1I3gvR8WE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Fri, 20 Feb 2015 11:29:27 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: TEST RELEASE: Cygwin 1.7.35-0.3
Message-ID: <20150220102927.GR26084@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150218105937 DOT GA28211 AT calimero DOT vinschen DOT de> <4693-1424392196-203662 AT sneakemail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="U/5EjKfnYgGK6hcj"
Content-Disposition: inline
In-Reply-To: <4693-1424392196-203662@sneakemail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--U/5EjKfnYgGK6hcj
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 19 17:29, John Hein wrote:
> Corinna Vinschen wrote at 11:59 +0100 on Feb 18, 2015:
>  > Hi Cygwin friends and users,
>  >
>  > I released another very early TEST version of the next upcoming Cygwin
>  > release.  The version number is 1.7.35-0.3.
>  >
>  > This release introduces a revision of the LDAP calls done to fetch
>  > information from the DC.  By limiting the search scope, the calls shou=
ld
>  > now be faster even in bigger environments.  Please give it a try with
>  > activated "db" settings for passwd and group entries in /etc/nsswitch.=
conf
>  >
>  >   passwd: db
>  >   group: db
>  >
>  > Please report back your experience, especially if you're suffering
>  > from "slow startup" problems.
>=20
> Without 'files' in /etc/nsswitch.conf or 'cygserver' running, the
> testing cycle here is slow.  So I've been a bit delayed at reporting
> back.  I know some people have alleged wonderful speedups with
> 1.7.35-0.3, but I can't report the same.
>=20
> Here I'm in an AD environment with ~8000 entries in AD (as determined
> by 'mkpasswd -d | wc') and I'm in 200+ groups.  I guess I'd call it
> somewhat large, and the network is geographically spread out and
> connected by links that vary in speed (the slowest is probably 10s of
> Mbps), although there is a local AD "slave" on the local LAN.
>=20
> It's particularly slow if I force using my shell of choice (tcsh)
> rather than forcing '/bin/dash' as the 'db_shell' entry in
> nsswitch.conf.  This is likely because of all the various things that
> get executed at shell startup (csh.cshrc, profile.d/*.csh).

Just as Achim reported in
https://cygwin.com/ml/cygwin/2015-02/msg00608.html

You may read my reply in
https://cygwin.com/ml/cygwin/2015-02/msg00610.html

It would be nice to keep this stuff together in a single thread.

I'm willing to work on this stuff, but I need patient testers :}

> Also mkpasswd -d seems to be taking a long time (haven't had it
> complete in hours now).  That didn't happen with 1.7.34 - maybe
> there's a local issue here on our network.

In theory, the mkpasswd call should be the same as before.  The LDAP
call performed to enumerate the domain hasn't changed, unless...
I made a single change in the filter expression for the user search:

Before=20

  filter =3D "(&(objectClass=3DUser)"
	     "(objectCategory=3DPerson)"
	     "(userAccountControl:" LDAP_MATCHING_RULE_BIT_AND ":=3D512)"
	     "(objectSid=3D*))";

After:

  filter =3D "(&(objectCategory=3DPerson)"
	     "(objectClass=3DUser)"
	     "(userAccountControl:" LDAP_MATCHING_RULE_BIT_AND ":=3D512)"
	     "(objectSid=3D*))";

So I just changed the order of the objectClass and objectCategory test.
If that's really the culprit, you can easily test it:

Revert to the Cygwin 1.7.34-6   DLL, run `time mkpasswd -d >/dev/null'
Revert to the Cygwin 1.7.35-0.3 DLL, run `time mkpasswd -d >/dev/null'
Revert to the Cygwin 1.7.34-6   DLL, run `time mkpasswd -d >/dev/null'
Revert to the Cygwin 1.7.35-0.3 DLL, run `time mkpasswd -d >/dev/null'

Does that clearly show that 1.7.34-6 is faster performing the enumeration?
If so, and despite my total puzzlement, the order in the expression seem
to have an effect.

> What's a good way to debug
> what's happening with mkpasswd?  Seems like its not doing anything.

Well, it works for me.  And since mkpasswd basically calls into the
Cygwin DLL to enumerate, it's not mkpasswd as such, but the Cygwin DLL
which is the culprit.

But, if you want to be sure mkpasswd is doing "something", just don't
redirect its output to a file, so the output goes to your terminal.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--U/5EjKfnYgGK6hcj
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=JfW5
-----END PGP SIGNATURE-----

--U/5EjKfnYgGK6hcj--