| Summary: | [RFE] realm discovers only the first three IP addresses | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Patrik Kis <pkis> |
| Component: | realmd | Assignee: | Stef Walter <stefw> |
| Status: | CLOSED WONTFIX | QA Contact: | Patrik Kis <pkis> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 7.0 | CC: | ebenes, ksrot, pkis, stefw |
| Target Milestone: | rc | Keywords: | FutureFeature |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Enhancement | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-07-14 18:37:54 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Patrik Kis
2013-10-02 15:46:37 UTC
Discovering and contacting all DC addresses for a large domain is a potentially nearly unbounded operation. We have to stop somewhere, so we chose to contact 3 addresses. Please reopen if this is an actual problem. Do you have a use case this breaks?Otherwise this is NOTABUG. Well, there isn't a real use case I'm just trying to test a scenario where the IPv6 network is down between the host and server. And wen there are 3 IPv6 addresses realm newer tries IPv4, the only one that actually works. I can fix it by removing one IPv6 address, so not a big deal. I just wanted to see if this is by purpose. I did some research how exactly it works and it looks like this: realmd tries to connect to remote ldap with the first 3 addresses and where no response is returned withing 15 sec. it quits with no result. If and error (e.g. icmp net unreachable) is returned from one of the addresses the next address from the pool is picked and that is tried and so on. All this within the first 15 seconds. This mechanisms seems to be ok, when errors are returned, but IMHO it could be more robust when no error is returned. For example try more (all) addresses (maybe not at once but e.g. 3 every 1 second) until one is answered. And timeout after 15 secs as it is. But this is really a marginal case, so feel free to close it as not a bug (and definitely we shouldn't bother with it in RHEL-7.0). Makes sense. This does not have a solid real world use case. I'm not against someone providing and including a patch for this, but I'm unable to spend time fixing what seems like an extreme edge case. Development Management has reviewed and declined this request. You may appeal this decision by reopening this request. |