The association page used to call user-find to get the member attributes. For pagination the page was changed to call user-show to get the member attributes, but some attributes are missing from the default output so it has to use the --all option which is slower. The -show command should be modified to include at least the attributes returned by the corresponding -find command. See also ticket #1136.

The user-find returns the following default attributes:

# ipa user-find zmarsh
  User login: zmarsh
  First name: Zackary
  Last name: Marsh
  Home directory: /home/zmarsh
  Login shell: /bin/sh
  Email address: zmarsh@example.com
  UID: 1098600050
  GID: 1098600050
  Telephone Number: 123-456-7890
  Job Title: Software Developer
  Account disabled: False

The user-show command returns the following default attributes:

# ipa user-show zmarsh
  User login: zmarsh
  First name: Zackary
  Last name: Marsh
  Home directory: /home/zmarsh
  Login shell: /bin/sh
  Telephone Number: 123-456-7890
  Job Title: Software Developer
  Account disabled: False
  Member of groups: ipausers

The following attributes are missing: email address, UID, GID.

The user-show returns an additional attribute (member of groups). This can be removed if there's any performance issue. The UI can specify the --all option if it needs the attribute.