Title: RE: [JBoss-user] [Security & JAAS/JBoss] - Fundamental performance problem with JaasSecurityManager

We discovered the same problem this week.  In our case a login module blocked at the database by another transaction led to a system wide deadlock.

Looking at the src it looks like there was an attempt to fix this last year, but the fix was rolled back a few days later:

> Mon Sep 15 15:52:01 2003 UTC (5 months, 1 week ago) by starksm
> Move the synchronization on the isValid method to the authenticate call to
> improve concurrency to the cache validation.

Is another try at the fix likely in 3.2.x?  In the meantime, be careful in your login modules.

Norrie

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of craigday
> Sent: Monday, February 23, 2004 6:03 AM
> To: [EMAIL PROTECTED]
> Subject: [JBoss-user] [Security & JAAS/JBoss] - Fundamental
> performance
> problem with JaasSecurityManager
>
>
> It appears to us that the synchronization in
> JaasSecurityManager is capable of causing significant
> performance problems in JBoss 3.2.1. The isValid() method,
> which is called from everywhere to do authentication and
> check authorization, is synchronized, presumably to protect
> the security cache. Ultimately the isValid() call may result
> in a call to our login module, which typically does database
> work. While our login module is doing the database work
> (username/password lookup, roles etc) no other part of the
> system can make a call to isValid(). Scott? Anyone? does this
> make sense, or are we missing something more fundamental :)
>
> cheers
> craig
>
> p.s. apologies for cross-posting,... accidentally placed the
> message in the development section.
>
> View the original post :
> http://www.jboss.org/index.html?module=bb&op=viewtopic&p=38225
41#3822541

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3822541


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to