Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1695685
Description of problem: When customer searches for a user via IPA WebUI, it takes really long time to display the user's details. The same user can be queries via CLI, within few seconds. The ipa cert-find command also takes time to complete, also sometime it fails with error `Unable to communicate with CMS (500)`. ---------------------------------- # time ipa cert-find --users=username --all ---------------------- 0 certificates matched ---------------------- ---------------------------- Number of entries returned 0 ---------------------------- real 1m6.283s user 0m0.529s sys 0m0.095s Version-Release number of selected component (if applicable): ipa-server-4.6.4-10.el7_6.3.x86_64
Metadata Update from @cheimes: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1695685
The issue is related to https://pagure.io/freeipa/issue/7835 . https://pagure.io/freeipa/c/ae74d348c3da580264c56441c136af3fc6ae58df added workaround for host and service certs but not for user certs.
Metadata Update from @cheimes: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2990 - Issue assigned to cheimes
master:
ipa-4-7:
ipa-4-6:
The workaround has landed in master, 4.7, and 4.6. See https://pagure.io/freeipa/issue/7904 for some edge cases.
Metadata Update from @cheimes: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.