On Thu, Sep 28, 2006, Mark Keller wrote:
>I have a feature request or bug fix as I see it.
>
>We use LDAP for NSS/PAM and we have about 50,000 user accounts and 50,000 
>groups. Each user has a group. I have noticed that our LDAP servers were 
>having some performance problems from time to time. I narrowed it down to 
>openpkg causing severe LDAP lookups during cron routines and other types of 
>openpkg commands.
>
>I found the following three shell scripts calling getent in a horribly 
>inefficient way. Basically causing a complete dump of the password and 
>group file for certain operations.

I ran into the same problem some time ago.  Since I think that
these calls are used exclusively to get the OpenPKG specific
users and groups, and I have these users and groups in the local
/etc/passwd and /etc/shadow file (or /etc/master.passwd on
FreeBSD systems), I made a dummy getent program in the PATH
before the system's getent.  This getent may be a symlink to
/bin/true since all it has to do is return successfully.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Systems, Inc.
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

The very powerful and the very stupid have one thing in common.
Instead of altering their views to fit the facts, they alter the facts
to fit their views ... which can be very uncomfortable if you happen to
be one of the facts that needs altering.
                -- Doctor Who, "Face of Evil"
______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
Developer Communication List                   openpkg-dev@openpkg.org

Reply via email to