RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1956388 - [RFE] Include KCM_OP_GET_CRED_LIST
Summary: [RFE] Include KCM_OP_GET_CRED_LIST
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: krb5
Version: 8.5
Hardware: Unspecified
OS: Unspecified
medium
unspecified
Target Milestone: beta
: ---
Assignee: Petr Vobornik
QA Contact: Filip Dvorak
Josip Vilicic
URL:
Whiteboard:
Depends On: 1956403
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-05-03 15:23 UTC by Pavel Březina
Modified: 2021-11-10 07:18 UTC (History)
4 users (show)

Fixed In Version: krb5-1.18.2-12.el8
Doc Type: Enhancement
Doc Text:
.SSSD Kerberos cache performance has been improved The System Security Services Daemon (SSSD) Kerberos Cache Manager (KCM) service now includes the new operation `KCM_GET_CRED_LIST`. This enhancement improves KCM performance by reducing the number of input and output operations while iterating through a credentials cache.
Clone Of:
: 1956403 (view as bug list)
Environment:
Last Closed: 2021-11-09 19:33:18 UTC
Type: Bug
Target Upstream Version:
Embargoed:
pm-rhel: mirror+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FREEIPA-7238 0 None None None 2021-11-05 10:19:21 UTC
Red Hat Product Errata RHBA-2021:4378 0 None None None 2021-11-09 19:33:41 UTC

Description Pavel Březina 2021-05-03 15:23:52 UTC
libkrb5 now supports KCM_OP_GET_CRED_LIST when talking with sssd-kcm to improve performance. Please include it in 8.5.

Commits:
* https://github.com/krb5/krb5/commit/81bdb47d8ded390263d8ee48f71d5c312b4f1736
* https://github.com/krb5/krb5/commit/06afae820a44c1dc96ad88a0b16c3e50bc938b2a

Comment 1 Pavel Březina 2021-05-17 13:34:20 UTC
Hi Robbie, is the plan to include both patches to 8.5?

Comment 3 Robbie Harwood 2021-05-17 14:52:00 UTC
The plan would be the same as in 9.

Comment 4 Pavel Březina 2021-05-17 14:54:29 UTC
Ok, I created https://bugzilla.redhat.com/show_bug.cgi?id=1961215 to return the correct error code.

Comment 16 errata-xmlrpc 2021-11-09 19:33:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (krb5 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4378


Note You need to log in before you can comment on or make changes to this bug.