Bug 2024602

Summary: Failover mechanisms for keystone LDAP backend are causing huge delays for some Horizon operations if one LDAP server is down
Product: Red Hat OpenStack Reporter: Grzegorz Grasza <ggrasza>
Component: openstack-keystoneAssignee: Grzegorz Grasza <ggrasza>
Status: CLOSED NOTABUG QA Contact: Jeremy Agee <jagee>
Severity: high Docs Contact:
Priority: high    
Version: 16.2 (Train)CC: andeshmu, astupnik, bshephar, ggrasza, jagee, jveiraca, oblaut, pweeks, shtiwari
Target Milestone: zstreamKeywords: Triaged, ZStream
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 1899127 Environment:
Last Closed: 2024-12-04 20:25:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1899127    

Comment 3 Grzegorz Grasza 2021-11-30 09:50:32 UTC
I'm working on a fix

Comment 6 Grzegorz Grasza 2021-12-16 11:33:42 UTC
While discussing this upstream, it was proposed that a better solution would be to set up a load balancer for LDAP (which I agree with). A load balancer is better placed to determine if a server is down and act appropriately, whereas keystone doesn't have any inter-process communication or place to hold such state.