Re: Slowdown with roundup 2.3.0 vs roundup 2.1.0?

"John P. Rouillard" <[email protected]> Mon, 30 Oct 2023 07:44:51 -0400
Newsgroups gmane.comp.bug-tracking.roundup.devel
Message-ID <[email protected]>
Hi Norbert:

In message <DU2PR01MB8557E1CD163602772C197124E8A1A@DU2PR01MB8557.eurprd01.prod.
exchangelabs.com>,
SCHLEMMER Norbert writes:
>> Norbert, let me know if I have the right diagnosis.
>
>You are right, it's fixed now.
>
>password_pbkdf2_default_rounds = 10000

You'll want to change that to 10001 before you upgrade and regenerate
your config file. If left at the default of 10000 it will
automatically be changed to a secure value of 2M.

>this is acceptable for our usage

Fair enough. That's why it's a settable parameter.

>BTW: what do you think about using an OAuth2 library … Keycloak as Docker

That would be a nice addition. There is an OAuth2/Oidc login mechansim
that needs to be integrated into the core at:

  https://github.com/psf/bpo-tracker-cpython/blob/master/extensions/openid_login.py

and 

  https://github.com/psf/bpo-tracker-cpython/blob/master/extensions/oic_login.py

bugs.python.org used it for logging in using: google, github or launchpad.

The starter issue for it is at:

   https://issues.roundup-tracker.org/issue2551239

to allow github login to be used on issues.roundup-tracker.org.

I just haven't had the time to start working on it.

--
				-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.


_______________________________________________
Roundup-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/roundup-devel