Hi all,

We have been having an issue with the RRSD taking long to process
certain events.

I have been doing some digging around and I see the reason for the
delay, but unsure why it is happening.

Here is an extract of the trace, uploading the trace for one event would
be too large to upload here.


Code:
--------------------
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.2.5">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:request dn="O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN =UserApplication\CN=AppConfig\CN=RoleConfig\CN=Req uests\CN=20150701001822-44efc34cdf35457189fc3118461a33a8-0" event-id="0" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/02/15 01:09:30.269]:Role and Resource ST:: Processing request
DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Request s\CN=20150701001822-44efc34cdf35457189fc3118461a33a8-0
[07/02/15 01:09:30.453]:Role and Resource ST:: Process Equivalent To Me
Role: Process Equivalent To Me
Role: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=RoleDef s\CN=Level10\CN=positionRoles\CN=192494
Operation: 7
Identity: O=bobbank\OU=bbank\OU=users\CN=3951049
Operation: {1}
Identity: {2}
[07/02/15 01:09:30.462]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=RoleDef s\CN=Level10\CN=positionRoles\CN=192494
[07/02/15 01:09:30.842]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eDefs\CN=PositionResource
[07/02/15 01:09:30.849]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135838-b05513fd78f549039fdee938f59c3a25
[07/02/15 01:09:30.859]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135756-6597bdc113764e08af17859949ef1f56
[07/02/15 01:09:30.871]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135735-1680a4ffc7b44d2794a0eb1c32b82cd3
[07/02/15 01:09:30.890]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135701-a045eeec65ae4000a2339a4ffc0c1a5a
[07/02/15 01:09:30.895]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135643-d6b181b452d340019c44ea6439275669
[07/02/15 01:09:30.903]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701135641-fd312b124b074e5eb73a97c72da87ec9
[07/02/15 01:09:30.910]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701125918-9a29c38b9b754313a0a0416a1eb42f5e
[07/02/15 01:09:30.917]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701125126-97b80d9f984f4e9bbe03d30b43b688e1
[07/02/15 01:09:30.924]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701124849-634620384f6e4bfeb37c3c5c89a9d4de
[07/02/15 01:09:30.930]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701045749-41480ad507f448e69b4492a7d289b5bf
[07/02/15 01:09:30.938]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150701045634-c77c52b7c7b346f39661e73831fa5074
[07/02/15 01:09:30.942]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150630120732-4ad6acb18a8040e6a53c6409e65401a8
[07/02/15 01:09:30.951]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150630113452-1d6f155886e04efe8278de2ffc82c036
[07/02/15 01:09:30.959]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150630113212-ded6b43813b34ab9948a1e8a64e143f6
[07/02/15 01:09:30.966]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150629154455-d3fa101533bb49a0a5039da1c01e8479
[07/02/15 01:09:30.974]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150629122634-216f3c0778004ef3af4776f14dc42fba
[07/02/15 01:09:30.981]:Role and Resource ST:: Retrieving resource association objects based on a role or resource DN. DN: O=bobbank\OU=bbank\OU=services\CN=DriverSet\CN=Use rApplication\CN=AppConfig\CN=RoleConfig\CN=Resourc eAssociations\CN=20150629060616-cd4e9abb98e1467a80234165a9f247fe
--------------------



So what I can is happening, is that there is a request to assigned a
role to a user. The RRSD then looks for any other child roles /
resources linked to this role.
But I do not understand why is is returning so many
ResourceAssociations? I would assume that the driver is querying for
(&(ObjectClass=ResourceAssociation)(nrfRole=roleDN )) which should only
return one object.

I have got a few screenshots of the ResourceAssociations that are
returned so show that the role in question is not in the resource
association.
I'll attached some links at the end.

As you can see in the screen shots... I have used the DynamicParmVals to
link all the position roles (30k of them) to 1 resource (why have more
than you need?).

Could someone please try shed some light on this behavior for me? Is
this happening because of the way I linked the roles and the resource?

http://tinypic.com/r/2iayck8/8
http://tinypic.com/r/8vvhiv/8

Please let me know if you need more info.

Thanks


+----------------------------------------------------------------------+
|Filename: 2015-07-02 14_20_12-RE_ RRSD Backlog - Message (HTML).png |
|Download: https://forums.netiq.com/attachment....tachmentid=303 |
+----------------------------------------------------------------------+

--
ccikara
------------------------------------------------------------------------
ccikara's Profile: https://forums.netiq.com/member.php?userid=506
View this thread: https://forums.netiq.com/showthread.php?t=53821