[
https://issues.apache.org/jira/browse/RANGER-3741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530170#comment-17530170
]
Larry McCay commented on RANGER-3741:
-------------------------------------
[~pradeep] - this is more likely due to SSSD (or something similar) performance
than it is the PAM library.
SSSD in particular can be slow with large numbers of users and groups and is
also often subject to network load.
I suspect that if you tried this with actual local OS accounts rather than
something like SSSD that you would see better performance.
In which case, you need to address the SSSD performance issue.
> Ranger PamAuthentication is slow
> --------------------------------
>
> Key: RANGER-3741
> URL: https://issues.apache.org/jira/browse/RANGER-3741
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Pradeep Agrawal
> Priority: Major
>
> Ranger PamAuthentication is slow, it takes 3 seconds to finish the
> authentication whether its success or fail.
> If PamAuthentication is enabled then even for the basic jdbc authentication
> the PamAuthentication check is executed first and after the PamAuthentication
> failure basic jdbc auth is attempted. this way all the basic jdbd auth
> request takes 3 seconds more which slow downs the large number of subsequent
> request.
>
> Ranger PamAuthentication uses
> [https://mvnrepository.com/artifact/org.kohsuke/libpam4j] library which is
> old and based on native c code.
> I have tried with latest available version and latest jna version also but
> with that also there is no improvement in the response time.
>
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
