#3968 krb5_child_init: check_ccache_files() might be *too* slow with large cache
Closed: Fixed 2 years ago by jhrozek. Opened 2 years ago by atikhonov.

This commit changed objectclass to objectcategory for users and group and hence removed them from the index.

Now code path krb5_child_init() -> init_renew_tgt() -> check_ccache_files() -> sysdb_search_entry() (== "(&("SYSDB_CCACHE_FILE"=*)("SYSDB_UC"))") might result in a very slow search preventing normal startup of provider.
For details see https://bugzilla.redhat.com/show_bug.cgi?id=1645461

Proposed solutions are:
@sbose : to add an index on the "ccacheFile" attribute to speed this search up
@jhrozek : not use sysdb_base_dn() in check_ccache_files() but use sysdb_user_base_dn() here instead and drop the objectcategory=user clause from the filter


Metadata Update from @atikhonov:
- Custom field rhbz adjusted to 1645461

2 years ago

note that the proposed solutions are not mutually exclusive.

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to 1645461, https://bugzilla.redhat.com/show_bug.cgi?id=1645461 (was: 1645461)

2 years ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.2

2 years ago

Metadata Update from @jhrozek:
- Issue assigned to jhrozek

2 years ago

Metadata Update from @jhrozek:
- Issue tagged with: PR, bug

2 years ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4941

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata