xapi-project / xen-api / 16713647101
80%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 0
Run time –
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
16713647101

push

github

web-flow 
CA-414418: Sessions do not got destroyed after domain  user been removed and performance improvement (#6609)

```
commit 92377bfe2 (HEAD -> private/linl/CA-414418, origin/private/linl/CA-414418)
Author: Lin Liu <Lin.Liu01@cloud.com>
Date:   Thu Jul 31 07:25:30 2025 +0000

    CA-414418: Perf: save user validate result and apply to sessions

    For all sessions created by external/AD users, session revalidate
    will check whether the users are still acitve, and kick off the
    session accordingly.

    However, xapi check the user for every session. The problem here
    is lots of session are created by only a few users. (for the case
    of CVAD and ControlUP). This would cause lot of duplicated check
    for the same user again and again, which is slow and waste lots
    of resources.

    To fix the issue, [(user_sid, check_result)] is defined for every
    round of check. The check result is saved so later check for the
    session with same user can just be applied.

    Signed-off-by: Lin Liu <Lin.Liu01@cloud.com>

commit b0e2b5bfd
Author: Lin Liu <Lin.Liu01@cloud.com>
Date:   Thu Jul 31 06:17:32 2025 +0000

    CA-414418: Detection of AD account removal does not cause logout

    For performance, during revalidate existing sessions, xapi query
    subject details from xapi db first, if the subject is suspend,
    then goes to AD, to make sure unblocked user can login.

    There is a backend thread to update xapi db subject information
    from AD. However, it can not handle the case that the subject
    is removed. (and should not remove the subject for user until
    user remove it explictly). Thus, the subject information is not
    updated and keep alive.

    In this case, subject revalidate always got session not suspend
    from xapi db.

    The issue is fixed by query subject information from AD direclty,
    and session revalidate thread handle the removed subject proper... (continued)
Jobs
ID Job ID Ran Files Coverage
1 python3.11 - 16713647101.1 34
80.35
 GitHub Action Run
Source Files on build 16713647101
Detailed source file information is not available for this build.