Skip to content

Conversation

@sssd-bot
Copy link
Contributor

This is an automatic backport of PR#8367 SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins to branch sssd-2-11, created by @alexey-tikhonov.

Please make sure this backport is correct.

Note

The commits were cherry-picked without conflicts.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8367-to-sssd-2-11
git checkout SSSD-sssd-backport-pr8367-to-sssd-2-11
git push sssd-bot SSSD-sssd-backport-pr8367-to-sssd-2-11 --force

Original commits
ee081e1 - SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins
7762901 - RESPONDER: fixed an issue with 'client_idle_timer'

Backported commits

  • 8ece4ac - SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins
  • 42461aa - RESPONDER: fixed an issue with 'client_idle_timer'

Original Pull Request Body

... and fixed an issue with 'client_idle_timer'

@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label Jan 19, 2026
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request is an automatic backport of two commits. The first commit increases the SBUS_MESSAGE_TIMEOUT from 2 minutes to 5 minutes to better handle long-running operations, such as initgroups for users with a very large number of groups. The second commit fixes a bug in the client idle timer logic, ensuring that connections are terminated correctly at the specified timeout. The changes are generally good, but I've noted one area for improvement where a similar bug in the responder idle timer was not addressed.

Copy link
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

backport looks like the original, ACK.

bye,
Sumit

Handling BE_REQ_INITGROUPS for LDAP user with 10k groups takes longer
than 2 mins.

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit ee081e1)
As it was implemented previously, effective period was 1.5*client_idle_timeout
instead of `client_idle_timeout` as documented.

Log with default value - 60 - before a fix:
```
(:49:12): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:49:42): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:50:12): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:50:42): [nss] [client_idle_handler] (0x2000): Terminating idle client [0x557af16f31b0][22]
```

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 7762901)
@sssd-bot
Copy link
Contributor Author

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 CodeQL (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 Build / make-distcheck (success)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-42) (success)
🟢 ci / intgcheck (fedora-43) (success)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / prepare (success)
🟢 ci / system (centos-10) (success)
🟢 ci / system (fedora-42) (success)
🟢 ci / system (fedora-43) (success)
🔴 ci / system (fedora-44) (failure)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🔴 Static code analysis / python-system-tests (failure)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@sssd-bot sssd-bot force-pushed the SSSD-sssd-backport-pr8367-to-sssd-2-11 branch from 42461aa to 7e56f39 Compare January 20, 2026 14:42
@alexey-tikhonov alexey-tikhonov merged commit fca8dfb into SSSD:sssd-2-11 Jan 20, 2026
8 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Accepted no-backport This should go to target branch only.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants