[Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time
Martin Kosek
mkosek at redhat.com
Fri Mar 14 13:34:54 UTC 2014
On 03/14/2014 02:21 PM, Rob Crittenden wrote:
> Martin Kosek wrote:
>> This step usually takes about 5 minutes. Current estimated time of
>> 30 seconds is misleading and may make admins think that the installation
>> is stuck. Change the estimation to 5 minutes.
>>
>> ---
>>
>> CC-ing Jakub who raised exactly this issue.
>
> It is entirely dependent upon how much entropy is available. I think 5 minutes
> is far too large. It may be overkill to check
> /proc/sys/kernel/random/entropy_avail to do the estimate.
>
> rob
>
Hm, I knew why I did not commit the patch and waited for a second opinion. A
proper fix indeed depends on system entropy so we may either increase the time
for some average we see in our VMs (and thus let people with enough entropy be
happy about shorter duration time) or scratch my patch and implement something
more robust, either based on available entropy or by giving a time range like
"30 seconds - 10 minutes, depending on available system entropy".
Martin
More information about the Freeipa-devel
mailing list