DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=QouK6lTuKZxWR9bsui+FIGwg37mHvZr639XlSigq9DCr0TciVmlqg
	adZnDn3dXaLLI7TaK0hqaSrESQEO+hwikHL2tS4PPb8xR4EbNN1GcIQTXUtYcE3s
	SbVx/8aJsZywqq//xvXmHTFd/gXoQPtqVlIEKhIcUbtnpbeS8ZdPpg=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Mon, 26 Oct 2015 11:07:56 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.3.0-0.4
Message-ID: <20151026100756.GC31990@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <announce DOT 20151022162227 DOT GC5319 AT calimero DOT vinschen DOT de> <loom DOT 20151023T153449-500 AT post DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="V88s5gaDVPzZ0KCq"
Content-Disposition: inline
In-Reply-To: <loom.20151023T153449-500@post.gmane.org>
User-Agent: Mutt/1.5.23 (2014-03-12)

--V88s5gaDVPzZ0KCq
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Oct 23 14:01, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > There's, as usual, a downside: AuthZ leans a bit to the slow side.
>=20
> It's not too bad, as long as your network connection is fast (and fast me=
ans
> short roundtrip time for an AD query).  If I take each page fault as
> reported by time as a proxy for an AD access, then it needs about three
> times more roundtrips to the AD.
>=20
> On a server with almost perfect connectivity to the AD that increases the
> wall-time of listing a very large directory with directories/files from m=
any
> users (about a quarter of all users in the AD, and not all from the local
> domain) from 8 to 10 minutes.  The CPU time as well as the network traffic
> is neglible in both cases.
>=20
> On my local laptop things look a bit different, a small ~5% subset of the
> test above goes from 20s to 200s and a different larger ~10% subset from =
50s
> to 500s.

Erm, really?  I tested this locally with a directory with hundreds
of files, each of which belonged to another user or group, and that
resulted in a 25% slowdown.  Not 1000%.  Oh boy.

> While that hurts, the more usual case with many files from the
> same user doesn't feel any slower at the moment.  The access through VPN
> will be interesting, though...

Did you try this in the meantime?

Given the above result, I'm wondering if we can afford using AuthZ at
all.  OTOH I don't see any other way to get the correct POSIX permissions
from a non-Cygwin ACL :(


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--V88s5gaDVPzZ0KCq
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=8+oO
-----END PGP SIGNATURE-----

--V88s5gaDVPzZ0KCq--