Ticket #1029 (closed defect: fixed)

Opened 5 years ago

Last modified 5 years ago

HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.

Reported by: sgallagh Owned by: sgallagh
Priority: major Milestone: SSSD 1.5.14
Component: IPA Provider Version: 1.6.1
Keywords: Cc:
Blocked By: Blocking:
Sensitive: Tests Updated: no
Coverity Bug: Patch Submitted: yes
Red Hat Bugzilla: 743035 Design link:
Feature Milestone:
Design review: Fedora test page:
Chosen: Candidate to push out:
Release Notes:
Temp mark:

Description (last modified by dpal) (diff)


Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing
Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:

Change History

comment:1 Changed 5 years ago by dpal

  • tests set to 0
  • upgrade set to 0
  • Description modified (diff)
  • Tests Updated unset
  • Patch Submitted unset
  • Milestone changed from NEEDS_TRIAGE to SSSD 1.5.14

comment:2 Changed 5 years ago by sgallagh

  • Owner changed from somebody to sgallagh
  • Status changed from new to assigned
  • Patch Submitted set

comment:4 Changed 5 years ago by mkosek

  • Red Hat Bugzilla set to [https://bugzilla.redhat.com/show_bug.cgi?id=743035 743035]
Note: See TracTickets for help on using tickets.