Ticket #1029 (closed defect: fixed)

Opened 3 years ago

Last modified 2 years ago

HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.

Reported by: sgallagh Owned by: sgallagh
Priority: major Milestone: SSSD 1.5.14
Component: IPA Provider Version: 1.6.1
Keywords: Cc:
Blocked By: Blocking:
Tests Updated: no Coverity Bug:
Patch Submitted: yes Red Hat Bugzilla: 743035
Design link:
Feature Milestone:
Design review: Fedora test page:
Chosen: Candidate to push out:
Release Notes:

Description (last modified by dpal) (diff)

https://bugzilla.redhat.com/show_bug.cgi?id=743035

Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing
  
Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:

Change History

comment:1 Changed 3 years ago by dpal

  • Patch Submitted unset
  • tests set to 0
  • Description modified (diff)
  • Tests Updated unset
  • Milestone changed from NEEDS_TRIAGE to SSSD 1.5.14
  • upgrade set to 0

comment:2 Changed 3 years ago by sgallagh

  • Status changed from new to assigned
  • Owner changed from somebody to sgallagh
  • Patch Submitted set

comment:4 Changed 2 years ago by mkosek

  • Red Hat Bugzilla set to [https://bugzilla.redhat.com/show_bug.cgi?id=743035 743035]
Note: See TracTickets for help on using tickets.