Hi and welcome to the Express forums.
We are going to need some additional information from you and potentially debug logs. Let's start with the basics.
- What version were you using before the upgrade?
Support for Ubuntu 16.04LTS was added with the latest release (5.3.1). If that's the case you may have been using older Centrify software (not tested with 16.04). - Did you perform an in-place OS upgrade and then upgraded Centrify or were these fresh 16.04 servers?
The best practice is to upgrade Centrify software, and then upgrade the OS. - You said you upgraded your servers (pl), is this (high CPU usage) affecting ALL your servers or just a subset or one?
If the behavior is accross the board, we will need to debug, if it's in a subset or individual system, then you have to look at those systems individually. - When the system crashed, did you retrieve the crash dump or did you proceed just to do a reinstall? How did you determine that the issue was related to DirectControl?
Finally, a few notes about Centrify Express. Express uses our workstation mode (AutoZone). This mode is not recommended when you have Active Directories that have hundreds of thousands of user/group objects; this is because DirectControl has to pre-cache and compute all users/groups/memberships/nested-groups. During cache build, our process will use system resources for this operation; as you can infer: the larger the AD, the longer we'll take.
When you upgrade our client, we will start a cache-rebuild operation.
Did you do a longer term process analysis?
Is the adclient process using a large CPU percentage right now?
If you want to get a count of users/groups, you could run these commands:
$ adquery user | wc -l $ adquery group | wc -l
This should count all users and all groups coming from AD.
Note that this also depends on what the system is doing. If you have an app that makes an NSS call like this: "give me all users and all groups and bypass the cache" we will have to go to DCs to get that information.
That's why commercial customers are recommended to use Centrify Standard Edition; our zones technology allows the limitation of UNIX-enabled user/group accounts.
Please answer my questions and this should give us enough information to get us started.
Forum Moderation: I am answering in the context of you having Centrify Express. If you're a commercial customer, please contact support. You are entitled to Standard or 24.7 support, plus you have access to other benefits like the KnowledgeBase, Self-service support case reporting and monitoring, Centrify Yum, APT and SuSe repos, etc.