Robbie brought up a question about KCM performance. We should do some benchmarks and compare how does KCM stack up against KEYRING so that users are not affected by any performance bugs when they use KCM.
I don't know what the exact goal should be, but "not too slower than KEYRING".
I think you just need to compare KCM performance to FILE ccache performance, as that is the baseline.
KEYRING will probably be faster but in general unless KCM is orders of magnitude slower than file ccaches you do not have a relevant perfoirmance issue. keep in mind ccaches are used only for brief moments to establish session keys and then not used anymore.
Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.0
to comment on this ticket.
Copyright © 2014-2018 Red Hat
4.0.3 — Documentation