Description of problem:
When searching for a user via IPA WebUI, it takes really long time to
display the user's details. The same user can be queries via CLI, within just 2
seconds.
We analyzed the JSON APIs being called by the webUI and found the following:
~~~
"postData": {
            "mimeType": "application/json",
            "text": "{\"method\":\"batch\",\"params\":[[{\"method\":\"user_show\",\"params\":[[\"foobar\"],{\"all\":true,\"rights\":true}]},{\"method\":\"pwpolicy_show\",\"params\":[[],{\"user\":\"foobar\",\"all\":true,\"rights\":true}]},{\"method\":\"krbtpolicy_show\",\"params\":[[\"foobar\"],{\"all\":true,\"rights\":true}]},{\"method\":\"cert_find\",\"params\":[[],{\"user\":[\"foobari\"],\"all\":true}]}],{\"version\":\"2.213\"}]}"
          }
judging from:
        "timings": {
          "blocked": 0.569999998333515,
          "dns": -1,
          "connect": -1,
          "send": 0.25000000096042596,
          "wait": 14061.900999999107,
          "receive": 5.9000000001287844,
          "ssl": -1
        },
~~~
~~~
[root@ipa1 ~]# time ipa cert-find --users=foobar --all
----------------------
0 certificates matched
----------------------
----------------------------
Number of entries returned 0
----------------------------
real    0m16.653s
user    0m0.864s
sys     0m0.132s
[root@ipa1 ~]#
All of the other commands took less than a second or about a second (see
attached ipa-commands.txt).
~~~
We ran the cert-find lookup several times, most times it took 12 - 15 secs to
return. The best we observed was 8 seconds.
Version-Release number of selected component (if applicable):
ipa-server-4.4.0-12.el7.x86_64
How reproducible:
Always
Steps to Reproduce:
1. Setup IPA server with about 500 test users
2. Search for any user in the Web UI
3.
Actual results:
Displaying the user's details can take up to 1 minute.
Expected results:
Results displayed in 2 - 3 secs.
Additional info: