Hacker News Reader

Are you integrating with IPA for Kerberos NFS? Or just uid/gid mappings? Wonder why the perf would be so bad over nfs after either though

View on HN

Sorry for the less useful rant. Yes, we are integrating with IPA for just uid/gid mappings. From the little time we got to debug before giving up, FreeBSD was fast and working as usual before IPA client enrolment was done. We tried NFSv3 (with separate lockd) and NFSv4.2 both only performing at about 20% the throughput of what we currently get out of ZFS on Linux. Both ZFS versions being the same. ZFS-2.1

It felt like we were in uncharted waters with the IPA client and gave up instead of fixing the problems.

I wish there was Pkg install ipa-client

Wait, I'm not following. IPA gives you user mappings but kills disk or network I/O?

Yah, this is a weird one. Did you test the performance with and without directory integration?

Unfortunately, it is going to stay mystically weird. We moved away to Linux in the interest of time. Yes, directory integration killed performance to unbearable levels. But, the fact that directory integration felt put together through uncharted channels in the first place made us not to waste time on it anymore.

Reply on news.ycombinator.com