Skip to content

[autobackport: sssd-2-12] SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins#8383

Merged
alexey-tikhonov merged 2 commits intoSSSD:sssd-2-12from
sssd-bot:SSSD-sssd-backport-pr8367-to-sssd-2-12
Jan 20, 2026
Merged

[autobackport: sssd-2-12] SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins#8383
alexey-tikhonov merged 2 commits intoSSSD:sssd-2-12from
sssd-bot:SSSD-sssd-backport-pr8367-to-sssd-2-12

Conversation

@sssd-bot
Copy link
Copy Markdown
Contributor

This is an automatic backport of PR#8367 SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins to branch sssd-2-12, created by @alexey-tikhonov.

Please make sure this backport is correct.

Note

The commits were cherry-picked without conflicts.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8367-to-sssd-2-12
git checkout SSSD-sssd-backport-pr8367-to-sssd-2-12
git push sssd-bot SSSD-sssd-backport-pr8367-to-sssd-2-12 --force

Original commits
ee081e1 - SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins
7762901 - RESPONDER: fixed an issue with 'client_idle_timer'

Backported commits

  • 727d302 - SBUS: increase SBUS_MESSAGE_TIMEOUT to 5 mins
  • 2928a30 - RESPONDER: fixed an issue with 'client_idle_timer'

Original Pull Request Body

... and fixed an issue with 'client_idle_timer'

@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label Jan 19, 2026
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request backports two changes: an increase of the SBUS message timeout and a fix for the client idle timer. The increase of SBUS_MESSAGE_TIMEOUT to 5 minutes in src/sbus/sbus_message.h is a reasonable adjustment to prevent timeouts on potentially long-running operations, such as initgroups for users with a vast number of group memberships, as noted in the code comment. The fixes in src/responder/common/responder_common.c correct a potential bug in the client idle connection reaping logic. The change of the comparison operator to >= and the adjustment of the timer's offset ensure that idle connections are terminated in a more accurate and timely manner, especially addressing edge cases related to timeout values. Both changes are sound and improve the reliability of SSSD.

Copy link
Copy Markdown
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

backport looks like the original, ACK.

bye,
Sumit

Handling BE_REQ_INITGROUPS for LDAP user with 10k groups takes longer
than 2 mins.

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit ee081e1)
As it was implemented previously, effective period was 1.5*client_idle_timeout
instead of `client_idle_timeout` as documented.

Log with default value - 60 - before a fix:
```
(:49:12): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:49:42): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:50:12): [nss] [setup_client_idle_timer] (0x4000): Idle timer re-set for client [0x557af16f31b0][22]
(:50:42): [nss] [client_idle_handler] (0x2000): Terminating idle client [0x557af16f31b0][22]
```

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 7762901)
@sssd-bot
Copy link
Copy Markdown
Contributor Author

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 Build / freebsd (success)
🟢 Build / make-distcheck (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@sssd-bot sssd-bot force-pushed the SSSD-sssd-backport-pr8367-to-sssd-2-12 branch from 2928a30 to 5d631af Compare January 20, 2026 09:48
@alexey-tikhonov alexey-tikhonov merged commit 124348c into SSSD:sssd-2-12 Jan 20, 2026
3 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Accepted no-backport This should go to target branch only.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants