DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=ZBva4lvQ5i6RXyrwWeJgR32nGqPZ58v8L2kbDL/UzecL1wQp6NdWX
	aNd38i3VORiV55xLwGa3lxKnMuz0N2KfQdRpCcotWrsn7hjXbEtgvoNf8dvoSA65
	UjKnheWkjUq9KnrnGsLWuhZ2jRiU/YuVkvTylRRcIeS0wRqJJjFqI8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Mon, 23 Feb 2015 12:17:21 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: TEST RELEASE: Cygwin 1.7.35-0.3
Message-ID: <20150223111721.GH437@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150220102927 DOT GR26084 AT calimero DOT vinschen DOT de> <6695-1424465180-282140 AT sneakemail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="LZFKeWUZP29EKQNE"
Content-Disposition: inline
In-Reply-To: <6695-1424465180-282140@sneakemail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--LZFKeWUZP29EKQNE
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 20 13:46, John Hein wrote:
> Corinna Vinschen wrote at 11:29 +0100 on Feb 20, 2015:
>  > So I just changed the order of the objectClass and objectCategory test.
>  > If that's really the culprit, you can easily test it:
>  >
>  > Revert to the Cygwin 1.7.34-6   DLL, run `time mkpasswd -d >/dev/null'
>  > Revert to the Cygwin 1.7.35-0.3 DLL, run `time mkpasswd -d >/dev/null'
>  > Revert to the Cygwin 1.7.34-6   DLL, run `time mkpasswd -d >/dev/null'
>  > Revert to the Cygwin 1.7.35-0.3 DLL, run `time mkpasswd -d >/dev/null'
>  >
>  > Does that clearly show that 1.7.34-6 is faster performing the enumerat=
ion?
>  > If so, and despite my total puzzlement, the order in the expression se=
em
>  > to have an effect.
>=20
>=20
> mkpasswd w/1.7.35-0.3 finally finished - took about 5+ hours and only
> returned ~1800 results instead of ~8000.
>=20
> mkpasswd w/1.7.33 took about 50 minutes.  This was mostly after peak
> business hours, however (not clear how much that matters).
>=20
> Trying 1.7.34-6 now.  Looks like it's going to be slow.  It's been
> two hours and only about 200 entries have trickled in.
>=20
> Slow going here.  Note this last run is under strace (see below), so
> not exactly what you suggested.  I'll try without strace and redirecting
> to /dev/null to see if it matters after this test finishes (if ever).

Come to think of it, it's probably really just slow.  The difference
between mkpasswd/mkgroup for domain accounts:

1.7.33:

  Calls NetUserEnum/NetGroupEnum,NetLocalGroupEnum with maximum Buffer
  size.

1.7.34+:

  Calls an LDAP enumerator fetching 100 SIDs per call.
  For each SID:
    Call LookupAccountSid.
    For each User:
      Depending on nsswitch.conf, call LDAP to fetch the extended passwd
      info (pw_shell, pw_home, pw_gecos).

I guess there's some room for improvement.

OTOH, keep in mind that you're not suppsoed to call mkpasswd/mkgroup
to enumerate your entire organization.  If you're using it at all, then
only to create the required entries in /etc/passwd and /etc/group for
your local acocunt to work, and then leave everything else to the "db"
setting.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--LZFKeWUZP29EKQNE
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=B1yX
-----END PGP SIGNATURE-----

--LZFKeWUZP29EKQNE--