Authentication failures/slowness after 4.1.1 upgrade (4282057)

Authentication failures/slowness after 4.1.1 upgrade

After upgrading from QAS 4.0.3 to QAS 4.1.1 system performance is very slow and we are seeing a lot of messages like this in the messages file:

    Dispatcher::Child 20726(Authentication handler) busy for <40> seconds, sending kill signal

The QAS cached credential cleanup routine is hanging trying to access home directories that are on inaccessible NFS mount points. There was a change in the way the cached credential cleanup routine is performed since 4.0.3 so the issue had previously gone unnoticed. Defect ID 693065 has been created for this issue.

693065

There are two places where a password hash are stored, once in the authcache database and also in the vas_disauthcc file in the user's home directory for applications which don't authenticate with root privileges. The change we made is that the stored credentials in the authcache database entry was wiped, but the entry in the table wasn't removed if we weren't able to access their home directory to remove the vas_disauthcc file as well. This was causing is to try and reprocess the same entries over and over again. Now as long as the local cache was wiped we consider it success and remove the entry so it's not checked again.