Bug 53956 - Faster kerberos discovery
Summary: Faster kerberos discovery
Status: RESOLVED FIXED
Alias: None
Product: realmd
Classification: Unclassified
Component: General (show other bugs)
Version: unspecified
Hardware: Other All
: medium normal
Assignee: Stef Walter
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 53934
Blocks: 53958
  Show dependency tree / graph
 
Reported: 2012-08-23 06:32 UTC by Stef Walter
Modified: 2012-08-30 14:25 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:

Attachments
Integrate kerberos discovery (48.28 KB, patch)
2012-08-23 06:34 UTC, Stef Walter 		Details | Splinter Review
Run IPA discovery in parallel against multiple KDCs (12.08 KB, patch)
2012-08-23 06:34 UTC, Stef Walter 		Details | Splinter Review
View All

Description Stef Walter 2012-08-23 06:32:55 UTC 
We should be able to do much faster kerberos discovery by doing this in parallel and aborting slow discovery when we know that it won't produce success.
Comment 1 Stef Walter 2012-08-23 06:34:09 UTC 
Created attachment 65996 [details] [review]
Integrate kerberos discovery

     * Discover everything about a kerberos domain in one place
       rather than duplicating implementation in different providers.
     * This lets us consolidate logic, and coordinate between the
       different types of kerberos domains.
Comment 2 Stef Walter 2012-08-23 06:34:49 UTC 
Created attachment 65997 [details] [review]
Run IPA discovery in parallel against multiple KDCs

     * Since we actually try to connect to the https port of the KDC
       this can timeout due to firewalls.
     * Set maximum timeout to 5 seconds for connection.
     * Try to connect to up to 3 KDCs in parallel, which should give us
       redundancy, and only take 5 seconds total when firewalled.
Comment 3 Stef Walter 2012-08-30 14:25:26 UTC 
Merged into master.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.