#1029 HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.

Created 5 years ago by sgallagh
Modified 7 months ago

https://bugzilla.redhat.com/show_bug.cgi?id=743035

Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:

Fields changed

coverity: =>
description: https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}
=> https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}

milestone: NEEDS_TRIAGE => SSSD 1.5.14
patch: => 0
rhbz: =>
tests: => 0
testsupdated: => 0
upgrade: => 0

Fields changed

owner: somebody => sgallagh
patch: 0 => 1
status: new => assigned

Fixed by:
- master
- 64e15adc53a8316277980ab8cee7d1f2227f1898
- f5e22261a2ff95f2a61f4f199fffb8de79668110
- c1fcc832ccfc237caac8b99be238cf2d598f908c
- sssd-1-6
- 148903f72904a19a05faa373faa4e0cd51891853
- 4a7f5136f3322143939a91f301394f072b2b1d08
- 66f9d4a3419bd8d41bd1ba50e69b00acd22e3123
- sssd-1-5
- d14a28835223c0578b0a28a8c74d11777c50bcb9
- d74b59b13208fa9508baaf5a1a5172fecad321ae
- 7c77e790204f82bce88dd6ecd237c941a9389349

resolution: => fixed
status: assigned => closed

7 months ago

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.14

Login to comment on this ticket.

defect

IPA Provider

1.6.1

0

1

https://bugzilla.redhat.com/show_bug.cgi?id=743035

cancel