[SSSD] [PATCH] Add online callback only once for TGT renewal

Stephen Gallagher sgallagh at redhat.com
Fri May 27 14:27:48 UTC 2011


On Fri, 2011-05-27 at 09:58 -0400, Dmitri Pal wrote:
> On 05/27/2011 07:02 AM, Sumit Bose wrote: 
> > Hi,
> > 
> > I confused the online callbacks with tevent timers when adding them to
> > the TGT renewal task with the effect that a new renewal timer was added
> > every time the system switched back from offline to online. Thanks to
> > Kaushik for catching this. The attached patch should fix it.

> What is the impact of this?
The renewals were occurring multiple times. This meant increased load on
the Kerberos server as well as extra log messages in SSSD's DEBUG logs
(as noticed by Kaushik)

> Is it a problem with the shipped version?
Yes

> Can it cause a leak or other issues?
It is technically a leak, but it is a very small amount of memory (one
additional tevent_timer object for each time we switched from offline
mode to online mode).

> Should we add it to errata?
I think that's should be decided by QE. I'm on the fence. The memory
leak doesn't concern me (since it's small) but the additional load on
the KDC might be worth the errata.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110527/fe48c71e/attachment.sig>


More information about the sssd-devel mailing list