Description of problem:

When searching for a user via IPA WebUI, it takes really long time to
display the user's details. The same user can be queries via CLI, within just 2
seconds.
We analyzed the JSON APIs being called by the webUI and found the following:

~~~
"postData": {
            "mimeType": "application/json",
            "text": "{\"method\":\"batch\",\"params\":[[{\"method\":\"user_show\",\"params\":[[\"foobar\"],{\"all\":true,\"rights\":true}]},{\"method\":\"pwpolicy_show\",\"params\":[[],{\"user\":\"foobar\",\"all\":true,\"rights\":true}]},{\"method\":\"krbtpolicy_show\",\"params\":[[\"foobar\"],{\"all\":true,\"rights\":true}]},{\"method\":\"cert_find\",\"params\":[[],{\"user\":[\"foobari\"],\"all\":true}]}],{\"version\":\"2.213\"}]}"
          }

judging from:
        "timings": {
          "blocked": 0.569999998333515,
          "dns": -1,
          "connect": -1,
          "send": 0.25000000096042596,
          "wait": 14061.900999999107,
          "receive": 5.9000000001287844,
          "ssl": -1
        },
~~~


~~~
[root@ipa1 ~]# time ipa cert-find --users=foobar --all
----------------------
0 certificates matched
----------------------
----------------------------
Number of entries returned 0
----------------------------

real    0m16.653s
user    0m0.864s
sys     0m0.132s
[root@ipa1 ~]#

All of the other commands took less than a second or about a second (see
attached ipa-commands.txt).
~~~

We ran the cert-find lookup several times, most times it took 12 - 15 secs to
return. The best we observed was 8 seconds.



Version-Release number of selected component (if applicable):
ipa-server-4.4.0-12.el7.x86_64


How reproducible:
Always


Steps to Reproduce:
1. Setup IPA server with about 500 test users
2. Search for any user in the Web UI
3.

Actual results:
Displaying the user's details can take up to 1 minute.


Expected results:
Results displayed in 2 - 3 secs.

Additional info: