Re: [ovirt-users] slow kerberos authentication

Friday, 12 May 2017

--Apple-Mail=_B91BD8B0-FBC3-4086-AA27-63311A6333FB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

...
 Le 12 mai 2017 =C3=A0 13:35, Ondra Machacek
<omachace(a)redhat.com&gt; a = =C3=A9crit :
...
=20
=20
=20
 On Fri, May 12, 2017 at 1:18 PM, Fabrice Bacchella =
<fabrice.bacchella(a)orange.fr <mailto:fabrice.bacchella@orange.fr>> =
wrote:
...
 The request is indeed quite slow within ovirt, using the setup given
= by Juan:
...
=20
 /ovirt-engine/sso/oauth/token-http-auth 7001ms
=20
 I was not able to authenticate jboss-cli.sh, I don't know why: =
'admin@internal-authz': No valid profile found in credentials.
...
=20
 It should be admin@internal.
 =20 
Indeed, but an export don't show that:

<user =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4" =
id=3D"0000001a-001a-001a-001a-0000000003b4">
  <department></department>
  =
<domain_entry_id>39323336363566612D373333622D346532612D396530632D316630396=
536643634636432</domain_entry_id>
  <email></email>
  <last_name></last_name>
  <name>admin</name>
  <namespace>*</namespace>
  <principal>admin</principal>
  <user_name>admin@internal-authz</user_name>
  <domain href=3D"/ovirt-engine/api/domains/696E7465726E616C2D617574687A" =
id=3D"696E7465726E616C2D617574687A">
    <name>internal-authz</name>
  </domain>
  <permissions =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/permi=
ssions"/>
  <roles =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/roles=
"/>
  <ssh_public_keys =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/sshpu=
blickeys"/>
  <tags =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/tags"=
/>
</user>

--Apple-Mail=_B91BD8B0-FBC3-4086-AA27-63311A6333FB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type"
content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D""><br class=3D""><div><blockquote
type=3D"cite" class=3D""><div =
class=3D"">Le 12 mai 2017 =C3=A0 13:35, Ondra Machacek &lt;<a =
href=3D"mailto:omachace@redhat.com"
class=3D&quot;&quot;&gt;omachace(a)redhat.com&lt;/a&gt;&amp;gt;=
 a =C3=A9crit :</div><br class=3D"Apple-interchange-newline"><div
=
class=3D""><div dir=3D"ltr" class=3D""><br
class=3D""><div =
class=3D"gmail_extra"><br class=3D""><div
class=3D"gmail_quote">On Fri, =
May 12, 2017 at 1:18 PM, Fabrice Bacchella <span dir=3D"ltr" =
class=3D"">&lt;<a
href=3D"mailto:fabrice.bacchella@orange.fr" =
target=3D"_blank"
class=3D&quot;&quot;&gt;fabrice.bacchella(a)orange.fr&lt;/a&gt;&amp;gt;&lt;/span&gt; =
wrote:<br class=3D""><blockquote class=3D"gmail_quote"
style=3D"margin:0px=
 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex">The request is indeed quite slow =
within ovirt, using the setup given by Juan:<br class=3D"">
<br class=3D"">
/ovirt-engine/sso/oauth/token-<wbr class=3D"">http-auth 7001ms<br =
class=3D"">
<br class=3D"">
I was not able to authenticate jboss-cli.sh, I don't know why: =
'admin@internal-authz': No valid profile found in credentials.<br =
class=3D""></blockquote><div class=3D""><br
class=3D""></div><div =
class=3D"">It should be admin(a)internal.&lt;br
class=3D""></div><div =
class=3D"">&nbsp;</div></div></div></div></div></blockquote><div><br
=
class=3D""></div>Indeed, but an export don't show
that:</div><div><br =
class=3D""></div><div><div style=3D"margin: 0px;
font-size: 11px; =
line-height: normal; font-family: Menlo;" class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures"
class=3D"">&lt;user =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4" =
id=3D"0000001a-001a-001a-001a-0000000003b4"&gt;</span></div><div
=
style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: =
Menlo;" class=3D""><span style=3D"font-variant-ligatures: =
no-common-ligatures" class=3D"">&nbsp; =
&lt;department&gt;&lt;/department&gt;</span></div><div
style=3D"margin: =
0px; font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp; =
&lt;domain_entry_id&gt;39323336363566612D373333622D346532612D396530632D316=
630396536643634636432&lt;/domain_entry_id&gt;</span></div><div =
style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: =
Menlo;" class=3D""><span style=3D"font-variant-ligatures: =
no-common-ligatures" class=3D"">&nbsp; =
&lt;email&gt;&lt;/email&gt;</span></div><div
style=3D"margin: 0px; =
font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp;
&lt;last_name&gt;&lt;/last_name&gt;</span></div><div =
style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: =
Menlo;" class=3D""><span style=3D"font-variant-ligatures: =
no-common-ligatures" class=3D"">&nbsp; =
&lt;name&gt;admin&lt;/name&gt;</span></div><div
style=3D"margin: 0px; =
font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp;
&lt;namespace&gt;*&lt;/namespace&gt;</span></div><div =
style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: =
Menlo;" class=3D""><span style=3D"font-variant-ligatures: =
no-common-ligatures" class=3D"">&nbsp; =
&lt;principal&gt;admin&lt;/principal&gt;</span></div><div
style=3D"margin:=
 0px; font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp; =
&lt;user_name&gt;admin@internal-authz&lt;/user_name&gt;</span></div><div
=
style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: =
Menlo;" class=3D""><span style=3D"font-variant-ligatures: =
no-common-ligatures" class=3D"">&nbsp; &lt;domain =
href=3D"/ovirt-engine/api/domains/696E7465726E616C2D617574687A" =
id=3D"696E7465726E616C2D617574687A"&gt;</span></div><div
style=3D"margin: =
0px; font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp; &nbsp; =
&lt;name&gt;internal-authz&lt;/name&gt;</span></div><div
style=3D"margin: =
0px; font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp; &lt;/domain&gt;</span></div><div
style=3D"margin: 0px; =
font-size: 11px; line-height: normal; font-family: Menlo;" =
class=3D""><span style=3D"font-variant-ligatures:
no-common-ligatures" =
class=3D"">&nbsp; &lt;permissions =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/permi=
ssions"/&gt;</span></div><div style=3D"margin: 0px;
font-size: 11px; =
line-height: normal; font-family: Menlo;" class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures"
class=3D"">&nbsp; =
&lt;roles =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/roles=
"/&gt;</span></div><div style=3D"margin: 0px; font-size:
11px; =
line-height: normal; font-family: Menlo;" class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures"
class=3D"">&nbsp; =
&lt;ssh_public_keys =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/sshpu=
blickeys"/&gt;</span></div><div style=3D"margin: 0px;
font-size: 11px; =
line-height: normal; font-family: Menlo;" class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures"
class=3D"">&nbsp; =
&lt;tags =
href=3D"/ovirt-engine/api/users/0000001a-001a-001a-001a-0000000003b4/tags"=
/&gt;</span></div><div style=3D"margin: 0px; font-size: 11px; =
line-height: normal; font-family: Menlo;" class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures" =
class=3D"">&lt;/user&gt;</span></div><div
class=3D""><span =
style=3D"font-variant-ligatures: no-common-ligatures"
class=3D""><br =
class=3D""></span></div></div><br
class=3D""></body></html>=

--Apple-Mail=_B91BD8B0-FBC3-4086-AA27-63311A6333FB--

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

Re: [ovirt-users] slow kerberos authentication