Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time

2014-03-14 Thread Martin Kosek
On 03/14/2014 02:21 PM, Rob Crittenden wrote:
> Martin Kosek wrote:
>> This step usually takes about 5 minutes. Current estimated time of
>> 30 seconds is misleading and may make admins think that the installation
>> is stuck. Change the estimation to 5 minutes.
>>
>> ---
>>
>> CC-ing Jakub who raised exactly this issue.
> 
> It is entirely dependent upon how much entropy is available. I think 5 minutes
> is far too large. It may be overkill to check
> /proc/sys/kernel/random/entropy_avail to do the estimate.
> 
> rob
> 

Hm, I knew why I did not commit the patch and waited for a second opinion. A
proper fix indeed depends on system entropy so we may either increase the time
for some average we see in our VMs (and thus let people with enough entropy be
happy about shorter duration time) or scratch my patch and implement something
more robust, either based on available entropy or by giving a time range like
"30 seconds - 10 minutes, depending on available system entropy".

Martin

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time

2014-03-14 Thread Rob Crittenden

Martin Kosek wrote:

This step usually takes about 5 minutes. Current estimated time of
30 seconds is misleading and may make admins think that the installation
is stuck. Change the estimation to 5 minutes.

---

CC-ing Jakub who raised exactly this issue.


It is entirely dependent upon how much entropy is available. I think 5 
minutes is far too large. It may be overkill to check 
/proc/sys/kernel/random/entropy_avail to do the estimate.


rob

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel