Hi Jeff,
Thanks for the reply. Yes, LDAP is quick as well. A regular ldap search works instantly. I tried moving the VM disks to local storage, rather than the shared Ceph storage (they’re on Proxmox), but it didn’t seem to help much.
I set apache logging to debug. I can see a pause here:
[Fri Jul 11 10:36:39.475671 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(2601): [client 10.1.1.1:13236] AH00944: connecting http://localhost/pun/sys/dashboard/ to localhost:80, referer: https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj
[Fri Jul 11 10:36:39.475683 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(2637): [client 10.1.1.1:13236] AH02545: http: has determined UDS as /var/run/ondemand-nginx/sebastian/passenger.sock, referer: https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj
[Fri Jul 11 10:36:39.475835 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(2824): [client 10.1.1.1:13236] AH00947: connected /pun/sys/dashboard/ to httpd-UDS:0, referer: https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj
[Fri Jul 11 10:36:39.475932 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(3191): AH02823: http: connection established with Unix domain socket /var/run/ondemand-nginx/sebastian/passenger.sock (*)
[Fri Jul 11 10:36:39.475984 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(3476): AH00962: http: connection complete to 0.0.0.0:0 (httpd-UDS)
[Fri Jul 11 10:36:39.476006 2025] [core:debug] [pid 9628:tid 139787226838592] core.c(5289): (95)Operation not supported: [remote /var/run/ondemand-nginx/sebastian/passenger.sock:12150] AH00139: apr_socket_opt_set(APR_TCP_NODELAY)
==> ondemand-nginx/sebastian/error.log <==
App 9712 output: [2025-07-11 10:36:44 -0400 ] WARN "Announcement file not found: /etc/ood/config/announcement.yml"
App 9712 output: [2025-07-11 10:36:44 -0400 ] WARN "Error opening MOTD at \nException: bad URI(is not URI?): nil"
App 9712 output: [2025-07-11 10:36:44 -0400 ] INFO "execve = [{\"SLURM_CONF\"=>\"/opt/slurm/etc/slurm.conf\"}, \"/opt/slurm/bin/sacctmgr\", \"-nP\", \"show\", \"users\", \"withassoc\", \"format=account,cluster,partition,qos\", \"where\", \"user=sebastian\"]"
App 9712 output: [2025-07-11 10:36:44 -0400 ] INFO "execve = [{\"SLURM_CONF\"=>\"/opt/slurm/etc/slurm.conf\"}, \"/opt/slurm/bin/scontrol\", \"show\", \"part\", \"-o\"]"
App 9712 output: [2025-07-11 10:36:44 -0400 ] INFO "method=GET path=/pun/sys/dashboard/ format=html controller=DashboardController action=index status=200 allocations=121030 duration=422.48 view=277.67"
==> ondemand-nginx/sebastian/access.log <==
unix: - - [11/Jul/2025:10:36:44 -0400] "GET /pun/sys/dashboard/ HTTP/1.1" 200 12393 "https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj" "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" "24.246.63.88, 10.1.1.1"
==> apache2/ondemand.vectorinstitute.ai_error_ssl.log <==
[Fri Jul 11 10:36:44.780062 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(2553): AH00943: *: has released connection for (*)
[Fri Jul 11 10:36:44.780124 2025] [proxy:debug] [pid 9628:tid 139787226838592] proxy_util.c(3400): [remote /var/run/ondemand-nginx/sebastian/passenger.sock:12150] AH02642: proxy: connection shutdown
[Fri Jul 11 10:36:44.780270 2025] [deflate:debug] [pid 9628:tid 139787226838592] mod_deflate.c(869): [client 10.1.1.1:13236] AH01384: Zlib: Compressed 12380 to 3378 : URL /pun/sys/dashboard/, referer: https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj
[Fri Jul 11 10:36:44.781256 2025] [lua:info] [pid 9628:tid 139787226838592] [client 10.1.1.1:13236] res_content_disp="" local_user="sebastian" allowed_hosts="ondemand.vectorinstitute.ai" req_status="200" log_id="aHEhd_WFYU1H6jZAQwVADQAAAE4" req_is_https="true" req_content_type="" res_content_location="" req_handler="proxy:unix:/var/run/ondemand-nginx/sebastian/passenger.sock|http://localhost" req_user_agent="Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" req_hostname="ondemand.vectorinstitute.ai" req_is_websocket="false" res_content_type="text/html; charset=utf-8" req_protocol="HTTP/1.1" req_accept="text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" req_accept_encoding="gzip, deflate, br, zstd" req_port="443" time_proxy="5305.653" req_server_name="ondemand.vectorinstitute.ai" req_filename="proxy:http://localhost/pun/sys/dashboard/" req_accept_language="en-us,en;q=0.5" req_referer="https://ondemand.vectorinstitute.ai/dex/auth/ldap/login" log_time="2025-07-11T14:36:44.781065.0Z" res_content_length="3396" res_location="" req_accept_charset="" time_user_map="0.003" res_content_language="" remote_user="sebastian" req_cache_control="" req_origin="" res_content_encoding="gzip" req_uri="/pun/sys/dashboard/" req_method="GET" req_user_ip="10.1.1.1" log_hook="ood", referer: https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj
==> apache2/ondemand.vectorinstitute.ai_access_ssl.log <==
10.1.1.1 - sebastian [11/Jul/2025:10:36:39 -0400] "GET /pun/sys/dashboard/ HTTP/1.1" 200 4772 "https://ondemand.vectorinstitute.ai/dex/auth/ldap/login?back=&state=t7zdioyesmejnfo63gte33voj" "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
==> apache2/ondemand.vectorinstitute.ai_error_ssl.log <==
[Fri Jul 11 10:36:44.878528 2025] [ssl:info] [pid 9627:tid 139788116006464] [client 10.1.1.1:13252] AH01964: Connection to child 6 established (server ondemand.vectorinstitute.ai:443)
[Fri Jul 11 10:36:44.878556 2025] [ssl:info] [pid 9628:tid 139787210053184] [client 10.1.1.1:13254] AH01964: Connection to child 80 established (server ondemand.vectorinstitute.ai:443)
[Fri Jul 11 10:36:44.878639 2025] [ssl:debug] [pid 9628:tid 139787218445888] ssl_engine_kernel.c(415): [client 10.1.1.1:13236] AH02034: Subsequent (No.8) HTTPS request received for child 79 (server ondemand.vectorinstitute.ai:443), referer: https://ondemand.vectorinstitute.ai/pun/sys/dashboard/
[Fri Jul 11 10:36:44.878778 2025] [authz_core:debug] [pid 9628:tid 139787218445888] mod_authz_core.c(815): [client 10.1.1.1:13236] AH01626: authorization result of Require valid-user : denied (no authenticated user yet), referer: https://ondemand.vectorinstitute.ai/pun/sys/dashboard/
[Fri Jul 11 10:36:44.878803 2025] [authz_core:debug] [pid 9628:tid 139787218445888] mod_authz_core.c(815): [client 10.1.1.1:13236] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet), referer: https://ondemand.vectorinstitute.ai/pun/sys/dashboard/
[Fri Jul 11 10:36:44.878820 2025] [auth_openidc:debug] [pid 9628:tid 139787218445888] src/mod_auth_openidc.c(3952): [client 10.1.1.1:13236] oidc_check_user_id: incoming request: "/pun/sys/dashboard/apps/icon/codeserver/sys/sys?(null)", ap_is_initial_req(r)=1, referer: https://ondemand.vectorinstitute.ai/pun/sys/dashboard/