#1029 HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.

Created 6 years ago by sgallagh
Modified 11 months ago

https://bugzilla.redhat.com/show_bug.cgi?id=743035

Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:

Fields changed

coverity: =>
description: https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}
=> https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}

milestone: NEEDS_TRIAGE => SSSD 1.5.14
patch: => 0
rhbz: =>
tests: => 0
testsupdated: => 0
upgrade: => 0

Fields changed

owner: somebody => sgallagh
patch: 0 => 1
status: new => assigned

Fixed by:
- master
- 64e15ad
- f5e2226
- c1fcc83
- sssd-1-6
- 148903f
- 4a7f513
- 66f9d4a
- sssd-1-5
- d14a288
- d74b59b
- 7c77e79

resolution: => fixed
status: assigned => closed

11 months ago

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.14

Login to comment on this ticket.

defect

IPA Provider

1.6.1

0

1

https://bugzilla.redhat.com/show_bug.cgi?id=743035

cancel