Re: [ovirt-users] slow kerberos authentication
The request is indeed quite slow within ovirt, using the setup given by Juan:
/ovirt-engine/sso/oauth/token-http-auth 7001ms
I was not able to authenticate jboss-cli.sh, I don't know why:
'admin@internal-authz': No valid profile found in credentials.
So I tried to modifie
usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine-logging.properties.in, adding:
org.ovirt.engineextensions.aaa=ALL
org.ovirt.engine.core.bll.aaa=ALL
and then restart ovirt-engine. But that changed nothing. That's not the good syntax ?
Le 12 mai 2017 à 09:25, Ondra Machacek <omachace(a)redhat.com> a
écrit :
I am not aware of anything, but debug log of all aaa stuff would help,
to understand what takes the most time.
- org.ovirt.engineextensions.aaa.ldap
- org.ovirt.engineextensions.aaa.misc
- org.ovirt.engine.core.aaa
- org.ovirt.engine.core.sso
To enable it in runtime, please follow:
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/READ...
On Thu, May 11, 2017 at 7:24 PM, Fabrice Bacchella <fabrice.bacchella(a)orange.fr>
wrote:
I'm using kerberos authentication in ovirt for the URL /sso/oauth/token-http-auth,
but kerberos is done in Apache using auth_gssapi_module and it's quite slow, about 6s
for a request.
I'm trying to understand if it's apache or ovirt-engine that are slow. Is there a
way to get response time metered for http requests inside ovirt instead of seen from
apache ?
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users