Bug 53956

Summary:	Faster kerberos discovery
Product:	realmd	Reporter:	Stef Walter <stefw>
Component:	General	Assignee:	Stef Walter <stefw>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	medium	CC:	halfline
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:
Bug Depends on:	53934
Bug Blocks:	53958
Attachments:	Integrate kerberos discovery Run IPA discovery in parallel against multiple KDCs

Description Stef Walter 2012-08-23 06:32:55 UTC

We should be able to do much faster kerberos discovery by doing this in parallel and aborting slow discovery when we know that it won't produce success.

Comment 1 Stef Walter 2012-08-23 06:34:09 UTC

Created attachment 65996 [details] [review]
Integrate kerberos discovery

     * Discover everything about a kerberos domain in one place
       rather than duplicating implementation in different providers.
     * This lets us consolidate logic, and coordinate between the
       different types of kerberos domains.

Comment 2 Stef Walter 2012-08-23 06:34:49 UTC

Created attachment 65997 [details] [review]
Run IPA discovery in parallel against multiple KDCs

     * Since we actually try to connect to the https port of the KDC
       this can timeout due to firewalls.
     * Set maximum timeout to 5 seconds for connection.
     * Try to connect to up to 3 KDCs in parallel, which should give us
       redundancy, and only take 5 seconds total when firewalled.

Comment 3 Stef Walter 2012-08-30 14:25:26 UTC

Merged into master.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.