** Summary changed:

- Timeout for listing GPOs is not enough in some cases
+ [SRU] Timeout for listing GPOs is not enough in some cases

** Description changed:

- [SRU]
- 
  [Impact]
  
  Adsys has a fixed timeout for listing the GPOs. This can cause issues on
  slower machines or in cases with many policies to be listed. Adding a
  configurable timeout prevents the daemon from timing out the listing
  process during its execution.
  
  [Test Plan]
  
  1. Configure A LOT (this can vary depending on the VM setup) of GPOs in
  the AD controller;
  
  2. Install adsys on the client, without changing the default settings;
  
  3. Run `adsysctl policy update --all`;
  
  4. With the default timeout, the command should timeout due to not being
  able to fetch all policies in time;
  
  5. Update adsys configuration file (/etc/adsys.yaml) and increase the
  gpo_list_timeout;
  
  6. Repeat step 3;
  
  7. With an increased timeout, the command should fetch all policies with
  no issues;
  
  [Where Problems Could Occur]
  
- If misconfigured, the timeout could be insufficient and adsys will not
- be able to download the GPOs from the provider in time, which would
- prevent AD users from authenticating.
- 
- -------------------------------
+ If misconfigured by the user, the timeout could be insufficient and AD
+ users would not be allowed to authenticate.
  
  Upstream PR: https://github.com/ubuntu/adsys/pull/1097

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2081966

Title:
  [SRU] Timeout for listing GPOs is not enough in some cases

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2081966/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to