Since RELEASE.2024-03-26T22-10-45Z console UI is very slow for LDAP authenticated users.

[abisek9186-baloise]

Console UI is really slow (takes around 20 to 30 seconds to load the object browser). We have around 150 objects across 3 buckets in this minio instance so number of objects should not be an issue.

Expected Behavior

Console UI should list the objects as fast as root user based login does.
While browsing via root login, the browsing is very fast, and akes ~1-2 secs only to load the object browser.

Current Behavior

Consule UI is realluy slow (takes around 20 to 30 seconds to load the object browser).
Performance for mc CLI against the MinIO API is consistently fast.

Current env variable which sets the LDAP config for the tenant, is below:

• name: MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN
  value: "ou=Users,ou=XXX,dc=YYY,dc=com"
• name: MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER
  value: "(&(objectCategory=person)(sAMAccountName=%s))"
• name: MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN
  value: "ou=Ressources-GRP,ou=Groups,ou=XXX,dc=YYY,dc=com"
• name: MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER
  value: "(&(objectClass=group)(member=%d))"

Your Environment

• Version used (minio --version): Any release after RELEASE.2024-03-26T22-10-45Z behaves the same
• Server setup and configuration: Helm chart based operator installation on OpenShift where operator manages the tenant
• Operating System and version (uname -a): OCP 4.14
• MinIO UI/API is exposed through OCP route.

[harshavardhana]

@bexsoft we have a community report now for the same issue.

[acheglakov]

Hello! We have the same issue. We noticed that the more groups a user has, the slower the console opens. The "mcli ls" command with access keys is also slower.

[harshavardhana]

@abisek9186-baloise we haven't been able to reproduce this with any baremetal setups.

[abisek9186-baloise]

@harshavardhana thanks for the update. I reported this particular issue on MinIO operator managed MinIO tenants on OpenShift.

[harshavardhana]

@harshavardhana thanks for the update. I reported this particular issue on MinIO operator managed MinIO tenants on OpenShift.

Yeah tried k8s yesterday nothing yet. it looks like we are missing something else here.

Is your LDAP an AD server or OpenLDAP ?

[abisek9186-baloise]

We use AD and not OpenLDAP. It could also be an issue with webSockets which I guess used by MinIO console. But we dont see any slowness we use root user to login to MinIO console.
OpenShift routers which publish MinIO routes, are configured to use proxy protocol for all OpenShift routes.
Not sure if below information helps

[acheglakov]

We are using AD and six nodes linux cluster. How could we grub diagnostic info for this issue?