#1029 HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.
Closed: Fixed Opened by sgallagh.

https://bugzilla.redhat.com/show_bug.cgi?id=743035

Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo
Version-Release number of selected component (if applicable):
sssd 1.5.x
How reproducible:
100%
Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing
Actual results:
30second + delay in authorizations
Expected results:
Much faster processing
Additional info:

Fields changed

coverity: =>
description: https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}
=> https://bugzilla.redhat.com/show_bug.cgi?id=743035

{{{
Description of problem:
When logging into an sssd client to a freeipa system who has many hosts, the delay in authorization can take over 30seconds for ssh and sudo

Version-Release number of selected component (if applicable):
sssd 1.5.x

How reproducible:
100%

Steps to Reproduce:
1. Create a FreeIPA install with over 1000 hosts + hostgroups + hbacrules
2. Login to a client
3. Note very long delay in processing

Actual results:
30second + delay in authorizations

Expected results:
Much faster processing

Additional info:
}}}

milestone: NEEDS_TRIAGE => SSSD 1.5.14
patch: => 0
rhbz: =>
tests: => 0
testsupdated: => 0
upgrade: => 0

Fields changed

owner: somebody => sgallagh
patch: 0 => 1
status: new => assigned

Fixed by:
- master
- 64e15adc53a8316277980ab8cee7d1f2227f1898
- f5e22261a2ff95f2a61f4f199fffb8de79668110
- c1fcc832ccfc237caac8b99be238cf2d598f908c
- sssd-1-6
- 148903f72904a19a05faa373faa4e0cd51891853
- 4a7f5136f3322143939a91f301394f072b2b1d08
- 66f9d4a3419bd8d41bd1ba50e69b00acd22e3123
- sssd-1-5
- d14a28835223c0578b0a28a8c74d11777c50bcb9
- d74b59b13208fa9508baaf5a1a5172fecad321ae
- 7c77e790204f82bce88dd6ecd237c941a9389349

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=743035 743035]

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.14

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2071

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata