<div dir="ltr">This feedback is even more convincing me that is a permissions check performance issue. I would expect the same performance on documents as well, because documents, maps, services and layers are all part of the ResourceBase model on which the permissions are applied, thus the permissions check is still over the whole data. And that a group non admin with full permissions is slow as well because only for superuser the permissions checks are disabled.<div><br></div><div>That said, the permissions check should be quite efficient and 190 layers is not so much so I don't know what could be and how the LDAP could be part of the problem. One thing would be to disable it, or roll back geonode to vanilla, and test with the same data and see if there's any difference. hunt down the issue in the security app in dev mode....</div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-09-22 11:28 GMT+02:00 Lubomir Filipov <span dir="ltr"><<a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks for the feedback Simone. Number of layers was first thing to think of..however the Documents page is the same performance and there are only 7 documents for now. <div>The layers page has: 167 layers (91 local geoserver and 76 are external remote services). Server is quite powerful (16 GB RAM, SSDs, blade server..). </div><div>I tried the following: create a group/add full rights to the group/assign the group to all layers for view/download/add a local or LDAP user to a group = the performance rate is the same. </div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="m_1298579752587101686gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Lubomir Filipov<br><br><font size="1"><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g">48 Evlogi Georgiev Blvd,</a><br><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g">1504 Sofia, Bulgaria</a><br>e-mail: <a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a><br>cell phone: <a href="tel:+359%2088%20897%202277" value="+359888972277" target="_blank">(+359) 888 972277</a><br>fax: <a href="tel:+359%202%20491%206469" value="+35924916469" target="_blank">(+359) 2 4916469</a><b><span style="font-family:'Times New Roman',serif" lang="EN-US"><a href="mailto:+359)%202%204916469" target="_blank"></a></span><br></b>skype name: fipeto<br><a href="http://www.linkedin.com/in/lubomirfilipov" target="_blank">http://www.linkedin.com/in/<wbr>lubomirfilipov</a><br><a href="http://www.facebook.com/GAPconsult.bg" target="_blank">http://www.facebook.com/<wbr>GAPconsult.bg</a> </font><br><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%"></div></div></div></div>
<br><div class="gmail_quote">On Fri, Sep 22, 2017 at 11:16 AM, Simone Dalmasso <span dir="ltr"><<a href="mailto:simone.dalmasso@gmail.com" target="_blank">simone.dalmasso@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi, home many layers do you have in your GeoNode, when a non superuser access the page all the permissions filter are applied and this could slow down it a bit. Though this is quite a lot.</div><div class="gmail_extra"><div><div class="m_1298579752587101686h5"><br><div class="gmail_quote">2017-09-22 10:32 GMT+02:00 Lubomir Filipov <span dir="ltr"><<a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi all, <div>I think I have narrow down the testing to the following: </div><div>1. Local user is superuser (in Django admin) = super fast browsing of maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)</div><div>2. LDAP user which is super user = super fast browsing of maps/layers/documents (e.g. loading time of Layers page ~ 1 sec)</div><div>3. LDAP user which is NOT super user = slow browsing of maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)</div><div>4. Local user which is NOT super user = slow browsing of maps/layers/documents (e.g. loading time of Layers page ~ 8 sec)</div><div>Anyone has experienced similar issues? (environment Ubuntu 16.04 / Geonode 2.6)</div><div>Thank you. </div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="m_1298579752587101686m_3613479889995762254m_7470957255433184942gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Lubomir Filipov<br><br><font size="1"><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g" target="_blank">48 Evlogi Georgiev Blvd,</a><br><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g" target="_blank">1504 Sofia, Bulgaria</a><br>e-mail: <a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a><br>cell phone: <a href="tel:+359%2088%20897%202277" value="+359888972277" target="_blank">(+359) 888 972277</a><br>fax: <a href="tel:+359%202%20491%206469" value="+35924916469" target="_blank">(+359) 2 4916469</a><b><span style="font-family:'Times New Roman',serif" lang="EN-US"><a href="mailto:+359)%202%204916469" target="_blank"></a></span><br></b>skype name: fipeto<br><a href="http://www.linkedin.com/in/lubomirfilipov" target="_blank">http://www.linkedin.com/in/lub<wbr>omirfilipov</a><br><a href="http://www.facebook.com/GAPconsult.bg" target="_blank">http://www.facebook.com/GAPcon<wbr>sult.bg</a> </font><br><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%"></div></div></div></div>
<br><div class="gmail_quote">On Tue, Sep 19, 2017 at 7:52 PM, Francesco Bartoli <span dir="ltr"><<a href="mailto:xbartolone@gmail.com" target="_blank">xbartolone@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">At minimum it is missing from your snippet the most important line:<div><div><br></div><div><span id="m_1298579752587101686m_3613479889995762254m_7470957255433184942m_-5945828951000332919docs-internal-guid-779ed530-9b43-0d1c-d07d-d947fea5053b">WSGIDaemonProcess geonode python-path=/usr/local/lib64/p<wbr>ython2.7/site-packages:/usr/li<wbr>b/python2.7/site-packages:/hom<wbr>e/geonode/.venvs/geonode/lib/p<wbr>ython2.7/site-packages user=apache <b>threads=15 processes=2</b></span><br></div><div><br></div><div>Although the issue could be also with tomcat...</div><div><br></div>Hope this helps</div><div><div>Francesco</div><span><div><br></div><u></u>Sent from <a href="https://n1.nylas.com/link/fa45e8e24d6b44948fb0e235ad6e446a4007d7cb0931a14d0eec4b727c65523c/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&recipient=lubomirfilipov%40gmail.com" target="_blank">Nylas Mail</a>, the best free email app for work<u></u></span></div><img class="m_1298579752587101686m_3613479889995762254m_7470957255433184942m_-5945828951000332919n1-open" width="0" height="0" style="border:0;width:0;height:0" src="https://n1.nylas.com/open/fa45e8e24d6b44948fb0e235ad6e446a4007d7cb0931a14d0eec4b727c65523c?recipient=lubomirfilipov%40gmail.com"><div class="m_1298579752587101686m_3613479889995762254m_7470957255433184942HOEnZb"><div class="m_1298579752587101686m_3613479889995762254m_7470957255433184942h5">
<div class="gmail_quote m_1298579752587101686m_3613479889995762254m_7470957255433184942m_-5945828951000332919nylas-quote m_1298579752587101686m_3613479889995762254m_7470957255433184942m_-5945828951000332919nylas-quote-id-2928083067a296e33943f5119bca9795ab36a8fa5c064c0dc9bbeef5c82ecde0">
<br>
On set 19 2017, at 5:11 pm, Lubomir Filipov <<a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a>> wrote:
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Thank you very much for the quick reply, Francesco. <br>No further changes are made after the LDAP activation, following the steps in the documentation. <div>Any reference how shall be fine tune the wsgi process and tomcat?</div><div><br></div><div><div> WSGIProcessGroup geonode</div><div> WSGIPassAuthorization On</div><div> WSGIScriptAlias / /var/www/geonode/wsgi/geonode.<wbr>wsgi</div><div><br></div><div> <Directory "/var/www/geonode/"></div><div> Order allow,deny</div><div> Allow from all</div><div> </Directory></div><div><br></div><div> Alias /static/ /var/www/geonode/static/</div><div> Alias /uploaded/ /var/www/geonode/uploaded/</div><div> Alias /robots.txt /var/www/geonode/robots.txt</div><div><br></div><div> <Directory "/var/www/geonode/uploaded/doc<wbr>uments/"></div><div> Order allow,deny</div><div> Deny from all</div><div> </Directory></div></div><div><div><br></div><div> <Directory "/var/www/geonode/uploaded/lay<wbr>ers/"></div><div> Order allow,deny</div><div> Deny from all</div><div> </Directory></div></div></div><div><br><div><div><div dir="ltr">Lubomir Filipov<br><br><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g" target="_blank">48 Evlogi Georgiev Blvd,</a><br><a href="https://maps.google.com/?q=48+Evlogi+Georgiev+Blvd,+1504+Sofia,+Bulgaria&entry=gmail&source=g" target="_blank">1504 Sofia, Bulgaria</a><br>e-mail: <a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a><br>cell phone: <a href="tel:+359%2088%20897%202277" value="+359888972277" target="_blank">(+359) 888 972277</a><br>fax: <a href="tel:+359%202%20491%206469" value="+35924916469" target="_blank">(+359) 2 4916469</a><b><span style="font-family:'Times New Roman',serif" lang="EN-US"><a href="mailto:+359)%202%204916469" target="_blank"></a></span><br></b>skype name: fipeto<br><a href="http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com" target="_blank">http://www.linkedin.com/in/lub<wbr>omirfilipov</a><br><a href="http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com" target="_blank">http://www.facebook.com/GAPcon<wbr>sult.bg</a> <br><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%"></div></div></div></div>
<br><div>On Tue, Sep 19, 2017 at 4:45 PM, Francesco Bartoli <span dir="ltr"><<a href="mailto:xbartolone@gmail.com" target="_blank">xbartolone@gmail.com</a>></span> wrote:<br><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">How did you tune the wsgi process and tomcat?<br><br><u></u>Sent from <a href="https://n1.nylas.com/link/589b5788c9033167aaf0d86a91e236e7d4bdbe7cd5ea2f3772971ba8c420e414/0?redirect=https%3A%2F%2Fnylas.com%3Fref%3Dn1&%3Brecipient=lubomirfilipov%40gmail.com&recipient=lubomirfilipov%40gmail.com" target="_blank">Nylas Mail</a>, the best free email app for work<u></u><img width="0" height="0" style="border:0;width:0;height:0" src="https://n1.nylas.com/open/589b5788c9033167aaf0d86a91e236e7d4bdbe7cd5ea2f3772971ba8c420e414?recipient=lubomirfilipov%40gmail.com">
<div><div><div>
<br>
On set 19 2017, at 4:23 pm, Lubomir Filipov <<a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a>> wrote:
<br>
</div></div><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<div dir="ltr"><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">Hello,<br></p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">we (IFAD.org) are implementing Geonode solution, version 2.6. I'm facing strange issue after integration with the enterprise LDAP system (following the instructions of <a href="http://docs.geonode.org/en/master/tutorials/admin/ldap/?recipient=lubomirfilipov%40gmail.com" target="_blank">http://docs.geonode.org/en/<wbr>master/tutorials/admin/ldap/</a>)<wbr>. <br></p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">We manage to successfully log in with an LDAP user, but I'm noticing a significant slow down of the system once used with LDAP user as opposed to a local user (super user - created during the Geonode installation). </p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">We have about 10 local web services and 80+ remote web services. All services has metadata associated. I notice the same slow navigation opening Map menu (only three maps), Documents menu (8 documents), the most significant delay is on Layers menu. </p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">I have checked the Geoserver Geofence Data Rules - I created a group for "Authenticated users", I have add all LDAP users to this group and assign the access role to all services, but there is no change. </p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">Greatly appreciate any feedback. Have anyone experience similar issue? </p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">Many thanks,</p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px"><br>Lubomir. </p><p style="margin-top:0px;margin-bottom:0px;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px"><br></p><div><div><div dir="ltr">Lubomir Filipov<br><br><a href="https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&%3Bentry=gmail&%3Bsource=g&recipient=lubomirfilipov%40gmail.com" target="_blank">48 Evlogi Georgiev Blvd,</a><br><a href="https://maps.google.com/?q=48%20Evlogi%20Georgiev%20Blvd%2C%201504%20Sofia%2C%20Bulgaria&%3Bentry=gmail&%3Bsource=g&recipient=lubomirfilipov%40gmail.com" target="_blank">1504 Sofia, Bulgaria</a><br>e-mail: <a href="mailto:lubomirfilipov@gmail.com" target="_blank">lubomirfilipov@gmail.com</a><br>cell phone: <a value="+359888972277">(+359) 888 972277</a><br>fax: <a value="+35924916469">(+359) 2 4916469</a><b><span style="font-family:"Times New Roman",serif" lang="EN-US"><a href="mailto:+359)%202%204916469" target="_blank"></a></span><br></b>skype name: fipeto<br><a href="http://www.linkedin.com/in/lubomirfilipov?recipient=lubomirfilipov%40gmail.com" target="_blank">http://www.linkedin.com/in/lub<wbr>omirfilipov</a><br><a href="http://www.facebook.com/GAPconsult.bg?recipient=lubomirfilipov%40gmail.com" target="_blank">http://www.facebook.com/GAPcon<wbr>sult.bg</a> <br><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%"></div></div></div></div>
</div>
</div></div><pre>______________________________<wbr>_________________
geonode-devel mailing list
<a href="mailto:geonode-devel@lists.osgeo.org" target="_blank">geonode-devel@lists.osgeo.org</a>
<a href="https://lists.osgeo.org/mailman/listinfo/geonode-devel?recipient=lubomirfilipov%40gmail.com" target="_blank">https://lists.osgeo.org/mailma<wbr>n/listinfo/geonode-devel</a>
</pre>
</blockquote>
</div>
</blockquote></div><br></div>
</blockquote>
</div>
</div></div></blockquote></div><br></div>
<br>______________________________<wbr>_________________<br>
geonode-devel mailing list<br>
<a href="mailto:geonode-devel@lists.osgeo.org" target="_blank">geonode-devel@lists.osgeo.org</a><br>
<a href="https://lists.osgeo.org/mailman/listinfo/geonode-devel" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailma<wbr>n/listinfo/geonode-devel</a><br>
<br></blockquote></div><br><br clear="all"><span class="HOEnZb"><font color="#888888"><div><br></div></font></span></div></div><span class="HOEnZb"><font color="#888888"><span class="m_1298579752587101686HOEnZb"><font color="#888888">-- <br><div class="m_1298579752587101686m_3613479889995762254gmail_signature" data-smartmail="gmail_signature">Simone </div>
</font></span></font></span></div>
</blockquote></div><br></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Simone </div>
</div>