URL:
https://github.com/SSSD/sssd/pull/5375
Title: #5375: kcm: improve performance for large ccaches
pbrezina commented:
"""
Ok, tests should pass now, it is ready for a new review.
There was a problem with kvno which is fixed by patch: `sss_ptr_hash: fix double free for
circular dependencies`. The problem was in case where the same connection iterated over
the credentials which caused the hash table corruption when overriding an existing
entry.
There where two quota related failures - one in secrets responder which was off by one
error because the payload size did not contain ending zero previously but now it does. The
other was in kcm multihost tests just because the new binary format takes much less data
so having just TGT in the ccache was not enough to exceed 1KiB limit. I call kinit now
which aquires TGT + control credentials which exceeds this limit.
I tried to use `kvno host/...` to do that but there may be a bug in libkrb5. When kvno
stored the service ticket, KCM returned `KRB5_FCC_INTERNAL` because the limit was exceeded
and the service ticket was not stored in the ccache. However `kvno` still printed the
principal information `host/master.client.vm(a)EXAMPLE.TEST: kvno = 2` and exited with 0. I
believe it is expected to fail?
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5375#issuecomment-721210321