Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time
On 03/14/2014 02:21 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> This step usually takes about 5 minutes. Current estimated time of >> 30 seconds is misleading and may make admins think that the installation >> is stuck. Change the estimation to 5 minutes. >> >> --- >> >> CC-ing Jakub who raised exactly this issue. > > It is entirely dependent upon how much entropy is available. I think 5 minutes > is far too large. It may be overkill to check > /proc/sys/kernel/random/entropy_avail to do the estimate. > > rob > Hm, I knew why I did not commit the patch and waited for a second opinion. A proper fix indeed depends on system entropy so we may either increase the time for some average we see in our VMs (and thus let people with enough entropy be happy about shorter duration time) or scratch my patch and implement something more robust, either based on available entropy or by giving a time range like "30 seconds - 10 minutes, depending on available system entropy". Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time
Martin Kosek wrote: This step usually takes about 5 minutes. Current estimated time of 30 seconds is misleading and may make admins think that the installation is stuck. Change the estimation to 5 minutes. --- CC-ing Jakub who raised exactly this issue. It is entirely dependent upon how much entropy is available. I think 5 minutes is far too large. It may be overkill to check /proc/sys/kernel/random/entropy_avail to do the estimate. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
[Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time
This step usually takes about 5 minutes. Current estimated time of
30 seconds is misleading and may make admins think that the installation
is stuck. Change the estimation to 5 minutes.
---
CC-ing Jakub who raised exactly this issue.
Martin
From 650e9f0c91593571d9edf0c30ada2468326210b4 Mon Sep 17 00:00:00 2001
From: Martin Kosek
Date: Fri, 14 Mar 2014 14:16:19 +0100
Subject: [PATCH] Increase Kerberos KDC configuration estimation time
This step usually takes about 5 minutes. Current estimated time of
30 seconds is misleading and may make admins think that the installation
is stuck. Change the estimation to 5 minutes.
---
ipaserver/install/krbinstance.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ipaserver/install/krbinstance.py b/ipaserver/install/krbinstance.py
index 80d1addb4d5559a6519aafede67aff17985f0a07..2b0622d1e3c855e8dc19d99b4d8a7a4f946bf7bc 100644
--- a/ipaserver/install/krbinstance.py
+++ b/ipaserver/install/krbinstance.py
@@ -180,7 +180,7 @@ def create_instance(self, realm_name, host_name, domain_name, admin_password, ma
self.__common_post_setup()
-self.start_creation(runtime=30)
+self.start_creation(runtime=300)
self.kpasswd = KpasswdInstance()
self.kpasswd.create_instance('KPASSWD', self.fqdn, self.admin_password, self.suffix, realm=self.realm)
--
1.8.5.3
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
