[ovirt-users] oVirt 3.6.1 with FreeIPA Auth domain performance

[Ondra Machacek]

Hi,

the best thing you can do is to migrate to new AAA ldap[1],
as anyway you will have to do so in 4.0, as manage-domains
will be removed, so I think better invest time to migration,
then to searching for root cause. We will be happy to help
you with migration. You can also try migration tool[2].

Ondra

[1] 
https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
[2] 
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases

On 01/22/2016 09:37 AM, Justin Bushey wrote:
> Hello,
>
> I just wanted to see if anyone else has seen issues with using FreeIPA
> as an authentication domain with oVirt 3.6.1. Specifically, I'm seeing
> extremely slow performance when authenticating as an IPA user, between
> 5-10 minutes to get logged into the UI. On the KDC side I'm seeing
> ticket requests from the oVirt host, which succeed and are repeated.
> Eventually authentication succeeds to the Web UI.
>
> The IPA domain was added using `engine-manage-domains` with the IPA
> provider option. I could configure direct LDAP authentication if
> absolutely need be, but this is really bugging me.
>
> Google hasn't turned up any similar issues so I wanted to check if
> anyone else has seen anything like this. I can post logs tomorrow if
> anyone wants to assist me in troubleshooting ;)
>
> Thanks,
>
> Justin Bushey
> InfoRelay Online Systems, Inc.
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>