Windows minions seem to re-authenticate for every job

[Szymon Juraszczyk]

Hi

Has anyone observed the same or am I just going nuts? I noticed that
Windows minions (2016.3.2) seem to re-authenticate for every job they
process. Linux minions (for RHEL 6) of the same version seem to be
unaffected by this problem.

After publishing a job for a Windows minion, I can see salt/auth events
on the master's event bus and in the syndic log I can see:

2016-08-30 11:23:19,142 [salt.master ][INFO ][30931] User root Published
command grains.items with jid 20160830112319124713
2016-08-30 11:23:21,019 [salt.transport.mixins.auth ][INFO ][30913]
Authentication request from myminion.mydomain.com
2016-08-30 11:23:21,019 [salt.transport.mixins.auth ][INFO ][30913]
Authentication accepted from myminion.mydomain.com
2016-08-30 11:23:21,141 [salt.utils.job ][INFO ][30925] Got return from
myminion.mydomain.com for job 20160830112319124713

The minion's log in debug mode contains:

2016-08-30 11:23:18,738 [salt.minion ][INFO ][5720] User root Executing
command grains.items with jid 20160830112319124713
2016-08-30 11:23:18,739 [salt.minion ][DEBUG ][5720] Command details
{'tgt_type': 'list', 'jid': '20160830112319124713', 'tgt':
['myminion.mydomain.com'], 'ret': '', 'user': 'root', 'arg': [[]],
'fun': 'grains.items', 'master_id': 'mymaster.mydomain.com'}
2016-08-30 11:23:20 [salt.minion ][INFO ] Starting a new job with PID 5896
2016-08-30 11:23:20 [salt.utils.lazy][DEBUG ] LazyLoaded grains.items
2016-08-30 11:23:20 [salt.utils.lazy][DEBUG ] LazyLoaded direct_call.get
2016-08-30 11:23:20 [salt.minion ][DEBUG ] Minion return retry timer set
to 6 seconds (randomized)
2016-08-30 11:23:20 [salt.minion ][INFO ] Returning information for job:
20160830112319124713
2016-08-30 11:23:20 [salt.transport.zeromq][DEBUG ] Initializing new
AsyncZeroMQReqChannel for ('c:\salt\conf\pki\minion',
'myminion.mydomain.com', 'tcp://1.2.3.4:4506', 'aes')
2016-08-30 11:23:20 [salt.crypt ][DEBUG ] Initializing new AsyncAuth for
('c:\salt\conf\pki\minion', 'myminion.mydomain.com', 'tcp://1.2.3.4:4506')
2016-08-30 11:23:20 [salt.transport.zeromq][DEBUG ] Initializing new
AsyncZeroMQReqChannel for ('c:\salt\conf\pki\minion',
'myminion.mydomain.com', 'tcp://1.2.3.4:4506', 'clear')
2016-08-30 11:23:20 [salt.crypt ][DEBUG ] Decrypting the current master
AES key
2016-08-30 11:23:20 [salt.crypt ][DEBUG ] Loaded minion key:
c:\salt\conf\pki\minion\minion.pem

That obviously can cause massive load on the syndics. Job processing is
also significantly slower - for Linux I get a response virtually
instantaneously whereas for Windows there is always a delay of 2+
seconds for such simple jobs like the one above, on otherwise completely
idle infrastructure.

--
Regards,
Szymon Juraszczyk, szy...@juraszczyk.com