Red Hat Bugzilla – Bug 1166641
ipa-otp-lasttoken loads all user's tokens on every mod/del
Last modified: 2015-03-05 05:15:40 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/4719 This is a huge performance hit. Effort should be taken to ensure this only occurs when the target is a token.
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/bdccb0c721283f17a48423ab562ab5515ecd7f8e https://fedorahosted.org/freeipa/changeset/953c6846b7cb8d75253538ab92a1360fceee0c3c https://fedorahosted.org/freeipa/changeset/08f8acd88c1858000f5a15c3838e1bfd78551c55 ipa-4-1: https://fedorahosted.org/freeipa/changeset/b4e85d02812041acb7a3071070b577adaecfe5c8 https://fedorahosted.org/freeipa/changeset/faa4d72a2f94a2da24b438f7de92e457229cc251 https://fedorahosted.org/freeipa/changeset/a0421d80823a35ab4145d4887cd8175048e8210c
Checked with Nathaniel on how to verify this. But there is no reproducer. No symptons were seen, but this bz addresses the concern to scale to a large deployment. Marking as Verified Sanity Only
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html