[GeoNode-devel] Geonode 2.6 - LDAP integration: slow performance

Simone Dalmasso simone.dalmasso at gmail.com
Fri Sep 22 02:36:32 PDT 2017 

This feedback is even more convincing me that is a permissions check
performance issue. I would expect the same performance on documents as
well, because documents, maps, services and layers are all part of the
ResourceBase model on which the permissions are applied, thus the
permissions check is still over the whole data. And that a group non admin
with full permissions is slow as well because only for superuser the
permissions checks are disabled.

That said, the permissions check should be quite efficient and 190 layers
is not so much so I don't know what could be and how the LDAP could be part
of the problem. One thing would be to disable it, or roll back geonode to
vanilla, and test with the same data and see if there's any difference.
hunt down the issue in the security app in dev mode....

2017-09-22 11:28 GMT+02:00 Lubomir Filipov <lubomirfilipov at gmail.com>:

> Thanks for the feedback Simone. Number of layers was first thing to think
> of..however the Documents page is the same performance and there are only 7
> documents for now.
> The layers page has: 167 layers (91 local geoserver and 76 are external
> remote services). Server is quite powerful (16 GB RAM, SSDs, blade
> server..).
> I tried the following: create a group/add full rights to the group/assign
> the group to all layers for view/download/add a local or LDAP user to a
> group = the performance rate is the same.
>
>
> Lubomir Filipov
>
> 48 Evlogi Georgiev Blvd,
> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
> 1504 Sofia, Bulgaria
> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
> e-mail: lubomirfilipov at gmail.com
> cell phone: (+359) 888 972277 <+359%2088%20897%202277>
> fax: (+359) 2 4916469 <+359%202%20491%206469>
> * <+359)%202%204916469>*skype name: fipeto
> http://www.linkedin.com/in/lubomirfilipov
> http://www.facebook.com/GAPconsult.bg
>
> On Fri, Sep 22, 2017 at 11:16 AM, Simone Dalmasso <
> simone.dalmasso at gmail.com> wrote:
>
>> Hi, home many layers do you have in your GeoNode, when a non superuser
>> access the page all the permissions filter are applied and this could slow
>> down it a bit. Though this is quite a lot.
>>
>> 2017-09-22 10:32 GMT+02:00 Lubomir Filipov <lubomirfilipov at gmail.com>:
>>
>>> Hi all,
>>> I think I have narrow down the testing to the following:
>>> 1. Local user is superuser (in Django admin) = super fast browsing of
>>> maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)
>>> 2. LDAP user which is super user = super fast browsing of
>>> maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)
>>> 3. LDAP user which is NOT super user = slow browsing of
>>> maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)
>>> 4. Local user which is NOT super user =  slow browsing of
>>> maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)
>>> Anyone has experienced similar issues? (environment Ubuntu 16.04 /
>>> Geonode 2.6)
>>> Thank you.
>>>
>>>
>>> Lubomir Filipov
>>>
>>> 48 Evlogi Georgiev Blvd,
>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>> 1504 Sofia, Bulgaria
>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>> e-mail: lubomirfilipov at gmail.com
>>> cell phone: (+359) 888 972277 <+359%2088%20897%202277>
>>> fax: (+359) 2 4916469 <+359%202%20491%206469>
>>> * <+359)%202%204916469>*skype name: fipeto
>>> http://www.linkedin.com/in/lubomirfilipov
>>> http://www.facebook.com/GAPconsult.bg
>>>
>>> On Tue, Sep 19, 2017 at 7:52 PM, Francesco Bartoli <xbartolone at gmail.com
>>> > wrote:
>>>
>>>> At minimum it is missing from your snippet the most important line:
>>>>
>>>> WSGIDaemonProcess geonode python-path=/usr/local/lib64/p
>>>> ython2.7/site-packages:/usr/lib/python2.7/site-packages:/hom
>>>> e/geonode/.venvs/geonode/lib/python2.7/site-packages user=apache *threads=15
>>>> processes=2*
>>>>
>>>> Although the issue could be also with tomcat...
>>>>
>>>> Hope this helps
>>>> Francesco
>>>>
>>>> Sent from Nylas Mail
>>>> <https://n1.nylas.com/link/fa45e8e24d6b44948fb0e235ad6e446a4007d7cb0931a14d0eec4b727c65523c/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&recipient=lubomirfilipov%40gmail.com>,
>>>> the best free email app for work
>>>>
>>>> On set 19 2017, at 5:11 pm, Lubomir Filipov <lubomirfilipov at gmail.com>
>>>> wrote:
>>>>
>>>>> Thank you very much for the quick reply, Francesco.
>>>>> No further changes are made after the LDAP activation, following the
>>>>> steps in the documentation.
>>>>> Any reference how shall be fine tune the wsgi process and tomcat?
>>>>>
>>>>>    WSGIProcessGroup geonode
>>>>>     WSGIPassAuthorization On
>>>>>     WSGIScriptAlias / /var/www/geonode/wsgi/geonode.wsgi
>>>>>
>>>>>     <Directory "/var/www/geonode/">
>>>>>        Order allow,deny
>>>>>        Allow from all
>>>>>     </Directory>
>>>>>
>>>>>     Alias /static/ /var/www/geonode/static/
>>>>>     Alias /uploaded/ /var/www/geonode/uploaded/
>>>>>     Alias /robots.txt /var/www/geonode/robots.txt
>>>>>
>>>>>     <Directory "/var/www/geonode/uploaded/documents/">
>>>>>        Order allow,deny
>>>>>        Deny from all
>>>>>     </Directory>
>>>>>
>>>>>     <Directory "/var/www/geonode/uploaded/layers/">
>>>>>        Order allow,deny
>>>>>        Deny from all
>>>>>     </Directory>
>>>>>
>>>>> Lubomir Filipov
>>>>>
>>>>> 48 Evlogi Georgiev Blvd,
>>>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>>>> 1504 Sofia, Bulgaria
>>>>> <https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g>
>>>>> e-mail: lubomirfilipov at gmail.com
>>>>> cell phone: (+359) 888 972277 <+359%2088%20897%202277>
>>>>> fax: (+359) 2 4916469 <+359%202%20491%206469>
>>>>> * <+359)%202%204916469>*skype name: fipeto
>>>>> http://www.linkedin.com/in/lubomirfilipov
>>>>> <http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com>
>>>>> http://www.facebook.com/GAPconsult.bg
>>>>> <http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com>
>>>>>
>>>>> On Tue, Sep 19, 2017 at 4:45 PM, Francesco Bartoli <
>>>>> xbartolone at gmail.com> wrote:
>>>>>
>>>>> How did you tune the wsgi process and tomcat?
>>>>>
>>>>> Sent from Nylas Mail
>>>>> <https://n1.nylas.com/link/589b5788c9033167aaf0d86a91e236e7d4bdbe7cd5ea2f3772971ba8c420e414/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&amp%3Brecipient=lubomirfilipov%40gmail.com&recipient=lubomirfilipov%40gmail.com>,
>>>>> the best free email app for work
>>>>>
>>>>> On set 19 2017, at 4:23 pm, Lubomir Filipov <lubomirfilipov at gmail.com>
>>>>> wrote:
>>>>>
>>>>> ​Hello,
>>>>>
>>>>> we (IFAD.org) are implementing Geonode solution, version 2.6. I'm
>>>>> facing strange issue after integration with the enterprise LDAP system
>>>>> (following the instructions of http://docs.geonode.org/en/
>>>>> master/tutorials/admin/ldap/
>>>>> <http://docs.geonode.org/en/master/tutorials/admin/ldap/?recipient=lubomirfilipov%40gmail.com>
>>>>> ​).
>>>>>
>>>>> We manage to successfully log in with an LDAP user, but I'm noticing a
>>>>> significant slow down of the system once used with LDAP user as opposed to
>>>>> a local user (super user - created during the Geonode installation).
>>>>>
>>>>> We have about 10 local web services and 80+ remote web services. All
>>>>> services has metadata associated. I notice the same slow navigation opening
>>>>> Map menu (only three maps), Documents menu (8 documents), the most
>>>>> significant delay is on Layers menu.
>>>>>
>>>>> I have checked the Geoserver Geofence Data Rules - I created a group
>>>>> for "Authenticated users", I have add all LDAP users to this group and
>>>>> assign the access role to all services, but there is no change.
>>>>>
>>>>> Greatly appreciate any feedback. Have anyone experience similar issue?
>>>>>
>>>>> Many thanks,
>>>>>
>>>>>
>>>>> Lubomir.
>>>>>
>>>>>
>>>>> Lubomir Filipov
>>>>>
>>>>> 48 Evlogi Georgiev Blvd,
>>>>> <https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&amp%3Bentry=gmail&amp%3Bsource=g&recipient=lubomirfilipov%40gmail.com>
>>>>> 1504 Sofia, Bulgaria
>>>>> <https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&amp%3Bentry=gmail&amp%3Bsource=g&recipient=lubomirfilipov%40gmail.com>
>>>>> e-mail: lubomirfilipov at gmail.com
>>>>> cell phone: (+359) 888 972277
>>>>> fax: (+359) 2 4916469
>>>>> * <+359)%202%204916469>*skype name: fipeto
>>>>> http://www.linkedin.com/in/lubomirfilipov
>>>>> <http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com>
>>>>> http://www.facebook.com/GAPconsult.bg
>>>>> <http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com>
>>>>>
>>>>> _______________________________________________
>>>>> geonode-devel mailing listgeonode-devel at lists.osgeo.orghttps://lists.osgeo.org/mailman/listinfo/geonode-devel <https://lists.osgeo.org/mailman/listinfo/geonode-devel?recipient=lubomirfilipov%40gmail.com>
>>>>>
>>>>>
>>>>>
>>>
>>> _______________________________________________
>>> geonode-devel mailing list
>>> geonode-devel at lists.osgeo.org
>>> https://lists.osgeo.org/mailman/listinfo/geonode-devel
>>>
>>>
>>
>>
>> --
>> Simone
>>
>
>


-- 
Simone
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-devel/attachments/20170922/28ed1672/attachment-0001.html>

More information about the geonode-devel mailing list