Pluggable Auth Service Ram Cache

maartenkling · August 8, 2014, 12:05pm

Hi,

What can go wrong when completely RAM caching the acl_user folder:
http://localhost:8080/Plone/acl_users/ZCacheable_manage

We are using membrane and LDAP users.

On every hit this is now skipped:

github.com

collective/Products.membrane/blob/master/Products/membrane/plugins/usermanager.py#L136


keywords = copy.deepcopy(kw)
keywords.update({'id': id,
                 'login': login,
                 'exact_match': exact_match,
                 'sort_by': sort_by,
                 'max_results': max_results}
                )
cached_info = self.ZCacheable_get(view_name=view_name,
                                  keywords=keywords, default=None)
if cached_info is not None:
    return tuple(cached_info)


# Note: ZCTextIndex doesn't allow 'contains' searches AFAICT,
#       so we use 'starts with'.
if login:
    if exact_match:
        query['exact_getUserName'] = login
    else:
        query['getUserName'] = ['%s*' % l for l in login]


elif id:

and calles _unrestrictedGetObject on line 185

Regards,

maartenkling · September 11, 2014, 7:08am

nobody?

pilz · September 11, 2014, 7:57am

Hi Marten,

we are not using membrane, but LDAP users. We do cache the whole acl_users folder for speed. However everytime the users are changed, we have to invalidate memcached accordingly and have had to build a custom step to do this.
Also you need to be sure to not have any custom objects in your users that can't be converted to memcached's dicts.

Otherwise no harm for 3 years now.

Best,
Alex

maartenkling · September 11, 2014, 8:01am

Hi Alex,

@pilz
Could you provide your invalidate step?

Regards,
Maarten

pilz · September 11, 2014, 10:02am

Hi Maarten,

here is a snippet: http://pastie.org/9544454

Mind we are using pas.plugins.ldap and the invalidate is actually clearing the whole cache, because we can currently not get hands on all affected objects efficiently. Therefore we use a dedicated cache for the user management.

Best,
Alex