Is your Jenkins home in a NFS or other network storage? I think so for the mount point, when a user enter a few files are written, because your IO is slow the IO operations are blocked waiting to finish that make the login slower than expected. You probably has more performance issues, I usually recommend to not use NFS file systems for the Jenkins home, take a look to this KB https://support.cloudbees.com/hc/en-us/articles/217479948-NFS-Guide
El jueves, 24 de septiembre de 2020 a las 15:52:05 UTC+2, [email protected] escribió: > Here are the logs in a better format. > > Sep 24, 2020 7:52:17 AM > FINE org.pac4j.saml.client.SAML2Client retrieveUserProfileAdding attribute > value mark.schroering@*****.com for attribute null > Sep 24, 2020 7:52:17 AM > FINE org.pac4j.core.profile.UserProfile addAttributeno conversion => key: > email / value: [mark.schroering@*****.com] / class java.util.ArrayList > Sep 24, 2020 7:52:17 AM > FINE org.pac4j.core.profile.UserProfile addAttributeno conversion => key: > notBefore / value: 2020-09-24T11:46:38.907Z / class org.joda.time.DateTime > Sep 24, 2020 7:52:17 AM > FINE org.pac4j.core.profile.UserProfile addAttributeno conversion => key: > notOnOrAfter / value: 2020-09-24T11:56:38.907Z / class > org.joda.time.DateTime > Sep 24, 2020 7:52:17 AM > FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperreset TCCL > Sep 24, 2020 7:53:35 AM > FINE > org.jenkinsci.plugins.saml.SamlSecurityRealmSamlSecurityRealm.doCommenceLogin > called. Using consumerServiceUrl > https://ci.infra.lifeomic.com/securityRealm/finishLogin > Sep 24, 2020 7:53:35 AM > FINE org.jenkinsci.plugins.saml.SamlSecurityRealmSafe URL redirection: / > Sep 24, 2020 7:53:35 AM > FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperadapt TCCL > Sep 24, 2020 7:53:45 AM > FINE > org.jenkinsci.plugins.saml.SamlSecurityRealmSamlSecurityRealm.doCommenceLogin > called. Using consumerServiceUrl > https://ci.infra.lifeomic.com/securityRealm/finishLogin > Sep 24, 2020 7:53:45 AM > FINE org.jenkinsci.plugins.saml.SamlSecurityRealmSafe URL redirection: / > Sep 24, 2020 7:53:45 AM > FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperadapt TCCL > Sep 24, 2020 7:54:13 AM > INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver Using SP > entity ID https://ci.infra.lifeomic.com/securityRealm/finishLogin > Sep 24, 2020 7:54:13 AM > INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver > resolveWriting sp metadata to /mnt/jenkins_home/saml-sp-metadata.xml > Sep 24, 2020 7:54:13 AM > INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver > resolveAttempting to create directory structure for /mnt/jenkins_home > > On Thursday, September 24, 2020 at 9:37:54 AM UTC-4 Mark Schroering wrote: > >> We have noticed it taking a very long time (up to 60s) to complete the >> SAML auth flow. Here are some logs showing the bigger time gaps. We are >> on version 1.1.7 of the SAML plugin and running Jenkins version 2.257. >> >> >> Sep 24, 2020 7:52:17 AM FINE org.pac4j.saml.client.SAML2Client >> retrieveUserProfileAdding attribute value mark.schroering@*****.com for >> attribute null Sep 24, 2020 7:52:17 >> AM FINE org.pac4j.core.profile.UserProfile addAttributeno conversion => >> key: email / value: [mark.schroering@*****.com] / class java.util.ArrayList >> Sep 24, 2020 7:52:17 AM FINE org.pac4j.core.profile.UserProfile >> addAttributeno conversion => key: notBefore / value: >> 2020-09-24T11:46:38.907Z / class org.joda.time.DateTime Sep 24, 2020 >> 7:52:17 AM FINE org.pac4j.core.profile.UserProfile addAttributeno >> conversion => key: notOnOrAfter / value: 2020-09-24T11:56:38.907Z / class >> org.joda.time.DateTime Sep 24, 2020 7:52:17 >> AM FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperreset TCCL Sep 24, 2020 >> 7:53:35 >> AM FINE >> org.jenkinsci.plugins.saml.SamlSecurityRealmSamlSecurityRealm.doCommenceLogin >> >> called. Using consumerServiceUrl >> https://ci.infra.lifeomic.com/securityRealm/finishLogin Sep 24, 2020 >> 7:53:35 AM FINE org.jenkinsci.plugins.saml.SamlSecurityRealmSafe URL >> redirection: / Sep 24, 2020 7:53:35 >> AM FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperadapt TCCL Sep 24, 2020 >> 7:53:45 >> AM FINE >> org.jenkinsci.plugins.saml.SamlSecurityRealmSamlSecurityRealm.doCommenceLogin >> >> called. Using consumerServiceUrl >> https://ci.infra.lifeomic.com/securityRealm/finishLogin Sep 24, 2020 >> 7:53:45 AM FINE org.jenkinsci.plugins.saml.SamlSecurityRealmSafe URL >> redirection: / Sep 24, 2020 7:53:45 >> AM FINEST org.jenkinsci.plugins.saml.OpenSAMLWrapperadapt TCCL Sep 24, 2020 >> 7:54:13 >> AM INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver Using >> SP entity ID https://ci.infra.lifeomic.com/securityRealm/finishLogin Sep >> 24, 2020 7:54:13 >> AM INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver >> resolveWriting sp metadata to /mnt/jenkins_home/saml-sp-metadata.xml Sep >> 24, 2020 7:54:13 >> AM INFO org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver >> resolveAttempting to create directory structure for /mnt/jenkins_home >> >> Looking at the browser tools on page load: >> >> GET /securityRealm/commenceLogin <-- 57s >> GET /securityRealm/finishLogin <--- 38s >> >> the Okta SSO parts in between seem to be quick as expected. >> >> Any tips on how to further debug or troubleshoot would be appreciated. >> >> Thanks for the help. >> >> -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/810359b0-dd76-4756-94c9-380ab99ae118n%40googlegroups.com.
