[ovirt-users] slow kerberos authentication

Ondra Machacek omachace at redhat.com
Fri May 12 07:25:19 UTC 2017


I am not aware of anything, but debug log of all aaa stuff would help,
to understand what takes the most time.

 - org.ovirt.engineextensions.aaa.ldap
 - org.ovirt.engineextensions.aaa.misc
 - org.ovirt.engine.core.aaa
 - org.ovirt.engine.core.sso

To enable it in runtime, please follow:


https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L469

On Thu, May 11, 2017 at 7:24 PM, Fabrice Bacchella <
fabrice.bacchella at orange.fr> wrote:

> I'm using kerberos authentication in ovirt for the URL
> /sso/oauth/token-http-auth, but kerberos is done in Apache using
> auth_gssapi_module and it's quite slow, about 6s for a request.
>
> I'm trying to understand if it's apache or ovirt-engine that are slow. Is
> there a way to get response time metered for http requests inside ovirt
> instead of seen from apache ?
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170512/35bd8e5f/attachment.html>


More information about the Users mailing list