Sorry for the delay but was overloaded with other things. On Wed, May 20, 2009 at 4:43 PM, Sam Hartman <hartm...@debian.org> wrote: > Can I get you to make sure you have krb5-user installed,
Yes, I have that package. > kinit -c KEYRING:blah <principal_name_goes_here> > and start firefox with the KRB5CCNAME environment variable set to KEYRING:blah > > (to confirm you're using the keyring cache, probably doing a kdestroy > on your normal tickets would be good) Ok I did exactly this: kinit -c KEYRING:blah <myuser> export KRB5CCNAME="KEYRING:blah" klist #now I see "Ticket cache: KEYRING:blah" firefox & #very slow as before klist #I see tickets requested for the web sites I'm trying to open > What I'm trying to do here is to see if the performance is dependent > on what type of credential cache is used. I'm suspecting that there > is a locking problem in either MIT or Heimdal. Either MIT holds a > lock too long, doesn't have fine grain locking somewhere, or Heimdal > has a race condition and is not holding a lock that it needs. The > keyring cache has a different locking path than the file based cache. > So, it may perform differently. If it is faster, then that tells us > something. If it is not, then we don't learn much. I wonder though if filesystem in use can make any difference given you are suspecting some cache and locking? > I don't have a test environment in which to reproduce this, although I > am talking to upstream about the issue. I have not actually opened an > upstream bug at this point; I've brought the issue up on the krbcore > list. I know it's very hard when you can't reproduce. I will understand if you give up as after all it is not a critical issue to me (I'm fine using heimdal). Thanks for trying to help. If you have any other ideas, I'll be happy to try. Actually I have one. I didn't try with any other kerberos service so if you know some other I can try with both implementations, that could possibly make a reproducer. Regards -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
