+++ This bug was initially created as a clone of Bug #1335488 +++ For kerbldap we are resolving groups also in authn stage, not only in authz stage. This was caused in 3.5 when we moved to using extensions, as before authz + authn was done in one stage in LdapAuthenticateUserCommand.java and in 3.5 it was split into two stages, but code unfortunatelly preserved. --- Additional comment from Red Hat Bugzilla Rules Engine on 2016-05-12 06:14:31 EDT --- This bug report has Keywords: Regression or TestBlocker. Since no regressions or test blockers are allowed between releases, it is also being identified as a blocker for this release. Please resolve ASAP. --- Additional comment from Ondra Machacek on 2016-05-12 06:15:56 EDT --- The result is that login time is ~two times longer.
Removing rhevm-4.0-ga as kerberos/ldap module (engine-manage-domains) has been removed in 4.0 completely and 3.6 is the last version which includes it.
Created attachment 1166196 [details] login log Verified with: rhevm-3.6.7.2-0.1.el6.noarch Log attached.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1364