[GeoNode-devel] Geonode 2.6 - LDAP integration: slow performance

Lubomir Filipov lubomirfilipov at gmail.com
Fri Sep 22 02:28:48 PDT 2017 

Thanks for the feedback Simone. Number of layers was first thing to think
of..however the Documents page is the same performance and there are only 7
documents for now.
The layers page has: 167 layers (91 local geoserver and 76 are external
remote services). Server is quite powerful (16 GB RAM, SSDs, blade
server..).
I tried the following: create a group/add full rights to the group/assign
the group to all layers for view/download/add a local or LDAP user to a
group = the performance rate is the same.


Lubomir Filipov

48 Evlogi Georgiev Blvd,
1504 Sofia, Bulgaria
e-mail: lubomirfilipov at gmail.com
cell phone: (+359) 888 972277
fax: (+359) 2 4916469
* <+359)%202%204916469>*skype name: fipeto
http://www.linkedin.com/in/lubomirfilipov
http://www.facebook.com/GAPconsult.bg

On Fri, Sep 22, 2017 at 11:16 AM, Simone Dalmasso <simone.dalmasso at gmail.com
> wrote:

> Hi, home many layers do you have in your GeoNode, when a non superuser
> access the page all the permissions filter are applied and this could slow
> down it a bit. Though this is quite a lot.
>
> 2017-09-22 10:32 GMT+02:00 Lubomir Filipov <lubomirfilipov at gmail.com>:
>
>> Hi all,
>> I think I have narrow down the testing to the following:
>> 1. Local user is superuser (in Django admin) = super fast browsing of
>> maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)
>> 2. LDAP user which is super user = super fast browsing of
>> maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)
>> 3. LDAP user which is NOT super user = slow browsing of
>> maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)
>> 4. Local user which is NOT super user =  slow browsing of
>> maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)
>> Anyone has experienced similar issues? (environment Ubuntu 16.04 /
>> Geonode 2.6)
>> Thank you.
>>
>>
>> Lubomir Filipov
>>
>> 48 Evlogi Georgiev Blvd,
>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>> 1504 Sofia, Bulgaria
>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>> e-mail: lubomirfilipov at gmail.com
>> cell phone: (+359) 888 972277 <+359%2088%20897%202277>
>> fax: (+359) 2 4916469 <+359%202%20491%206469>
>> * <+359)%202%204916469>*skype name: fipeto
>> http://www.linkedin.com/in/lubomirfilipov
>> http://www.facebook.com/GAPconsult.bg
>>
>> On Tue, Sep 19, 2017 at 7:52 PM, Francesco Bartoli <xbartolone at gmail.com>
>> wrote:
>>
>>> At minimum it is missing from your snippet the most important line:
>>>
>>> WSGIDaemonProcess geonode python-path=/usr/local/lib64/p
>>> ython2.7/site-packages:/usr/lib/python2.7/site-packages:/hom
>>> e/geonode/.venvs/geonode/lib/python2.7/site-packages user=apache *threads=15
>>> processes=2*
>>>
>>> Although the issue could be also with tomcat...
>>>
>>> Hope this helps
>>> Francesco
>>>
>>> Sent from Nylas Mail
>>> <https://n1.nylas.com/link/fa45e8e24d6b44948fb0e235ad6e446a4007d7cb0931a14d0eec4b727c65523c/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&recipient=lubomirfilipov%40gmail.com>,
>>> the best free email app for work
>>>
>>> On set 19 2017, at 5:11 pm, Lubomir Filipov <lubomirfilipov at gmail.com>
>>> wrote:
>>>
>>>> Thank you very much for the quick reply, Francesco.
>>>> No further changes are made after the LDAP activation, following the
>>>> steps in the documentation.
>>>> Any reference how shall be fine tune the wsgi process and tomcat?
>>>>
>>>>    WSGIProcessGroup geonode
>>>>     WSGIPassAuthorization On
>>>>     WSGIScriptAlias / /var/www/geonode/wsgi/geonode.wsgi
>>>>
>>>>     <Directory "/var/www/geonode/">
>>>>        Order allow,deny
>>>>        Allow from all
>>>>     </Directory>
>>>>
>>>>     Alias /static/ /var/www/geonode/static/
>>>>     Alias /uploaded/ /var/www/geonode/uploaded/
>>>>     Alias /robots.txt /var/www/geonode/robots.txt
>>>>
>>>>     <Directory "/var/www/geonode/uploaded/documents/">
>>>>        Order allow,deny
>>>>        Deny from all
>>>>     </Directory>
>>>>
>>>>     <Directory "/var/www/geonode/uploaded/layers/">
>>>>        Order allow,deny
>>>>        Deny from all
>>>>     </Directory>
>>>>
>>>> Lubomir Filipov
>>>>
>>>> 48 Evlogi Georgiev Blvd,
>>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>>> 1504 Sofia, Bulgaria
>>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>>> e-mail: lubomirfilipov at gmail.com
>>>> cell phone: (+359) 888 972277 <+359%2088%20897%202277>
>>>> fax: (+359) 2 4916469 <+359%202%20491%206469>
>>>> * <+359)%202%204916469>*skype name: fipeto
>>>> http://www.linkedin.com/in/lubomirfilipov
>>>> <http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com>
>>>> http://www.facebook.com/GAPconsult.bg
>>>> <http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com>
>>>>
>>>> On Tue, Sep 19, 2017 at 4:45 PM, Francesco Bartoli <
>>>> xbartolone at gmail.com> wrote:
>>>>
>>>> How did you tune the wsgi process and tomcat?
>>>>
>>>> Sent from Nylas Mail
>>>> <https://n1.nylas.com/link/589b5788c9033167aaf0d86a91e236e7d4bdbe7cd5ea2f3772971ba8c420e414/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&amp%3Brecipient=lubomirfilipov%40gmail.com&recipient=lubomirfilipov%40gmail.com>,
>>>> the best free email app for work
>>>>
>>>> On set 19 2017, at 4:23 pm, Lubomir Filipov <lubomirfilipov at gmail.com>
>>>> wrote:
>>>>
>>>> ​Hello,
>>>>
>>>> we (IFAD.org) are implementing Geonode solution, version 2.6. I'm
>>>> facing strange issue after integration with the enterprise LDAP system
>>>> (following the instructions of http://docs.geonode.org/en/
>>>> master/tutorials/admin/ldap/
>>>> <http://docs.geonode.org/en/master/tutorials/admin/ldap/?recipient=lubomirfilipov%40gmail.com>
>>>> ​).
>>>>
>>>> We manage to successfully log in with an LDAP user, but I'm noticing a
>>>> significant slow down of the system once used with LDAP user as opposed to
>>>> a local user (super user - created during the Geonode installation).
>>>>
>>>> We have about 10 local web services and 80+ remote web services. All
>>>> services has metadata associated. I notice the same slow navigation opening
>>>> Map menu (only three maps), Documents menu (8 documents), the most
>>>> significant delay is on Layers menu.
>>>>
>>>> I have checked the Geoserver Geofence Data Rules - I created a group
>>>> for "Authenticated users", I have add all LDAP users to this group and
>>>> assign the access role to all services, but there is no change.
>>>>
>>>> Greatly appreciate any feedback. Have anyone experience similar issue?
>>>>
>>>> Many thanks,
>>>>
>>>>
>>>> Lubomir.
>>>>
>>>>
>>>> Lubomir Filipov
>>>>
>>>> 48 Evlogi Georgiev Blvd,
>>>> <https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&amp%3Bentry=gmail&amp%3Bsource=g&recipient=lubomirfilipov%40gmail.com>
>>>> 1504 Sofia, Bulgaria
>>>> <https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&amp%3Bentry=gmail&amp%3Bsource=g&recipient=lubomirfilipov%40gmail.com>
>>>> e-mail: lubomirfilipov at gmail.com
>>>> cell phone: (+359) 888 972277
>>>> fax: (+359) 2 4916469
>>>> * <+359)%202%204916469>*skype name: fipeto
>>>> http://www.linkedin.com/in/lubomirfilipov
>>>> <http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com>
>>>> http://www.facebook.com/GAPconsult.bg
>>>> <http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com>
>>>>
>>>> _______________________________________________
>>>> geonode-devel mailing listgeonode-devel at lists.osgeo.orghttps://lists.osgeo.org/mailman/listinfo/geonode-devel <https://lists.osgeo.org/mailman/listinfo/geonode-devel?recipient=lubomirfilipov%40gmail.com>
>>>>
>>>>
>>>>
>>
>> _______________________________________________
>> geonode-devel mailing list
>> geonode-devel at lists.osgeo.org
>> https://lists.osgeo.org/mailman/listinfo/geonode-devel
>>
>>
>
>
> --
> Simone
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-devel/attachments/20170922/654aa730/attachment.html>

More information about the geonode-devel mailing list