Description of problem:
The %post script checks if a UID is unused by running 'getent passwd',
extracting the UID fields, and checking if a candidate UID is in the output
list.  It does this for every candidate UID.  Then it does this for groups, but
without isolating the GID field, so any entry which contains the candidate GID
as a substring will cause that GID to appear to be used.  Our densely populated
group list here is causing this loop for many more iterations than it should.
Version-Release number of selected component (if applicable):
389-ds-base-1.3.5.14-1.fc25
How reproducible:
Always
Steps to Reproduce:
1. Upgrade the package on a system with many groups, where 'getent group' is
takes a non-trivial amount of time to run.
Actual results:
This %post has been running for three hours on my workstation.
Expected results:
Shorter execution time, by using awk to extract just the GID field, as is done
for passwd entries, and possibly by only asking getent for one passwd or group
entry at a time, or by caching the enumeration output and then examining that.
Additional info:
Suppressed output attempts to refer to "%dirsrv_uid" and "%dirsrv_gid", which
are not defined macros, which will interact badly with the shell that's
executing the script.