Stephen found out that I was not canceling failed transactions correctly
in my recent initgroups patches.
This patch applies to master only, I will roll the changes into the
inigroups patches themselves for 1.5 and 1.6.
Instead of saving each group as we fetch it from LDAP during initgroups,
just build the membership diff in-memory and the perform three
* save the groups if not cached already
* save the intergroup memberships
* save the user membership to his direct parents
[PATCH 1/3] Utility functions for LDAP nested schema initgroups
These will be used later on
[PATCH 2/3] Use fewer transactions during RFC2307bis initgroups
Save the groups to a hash table and save them in three transactions
[PATCH 3/3] Use fewer transactions during IPA initgroups
No need for a hash table because we can grab all the groups in a single
request. Just save them in a way similar to RFC2307bis initgroups
The intent was to wait for ping_time *seconds*, but the argument for
sbus_conn_send() is in *milliseconds*. The result of this was that we
were timing out much too quickly if the process on the other end was at
Attached is a patch that changes the example config we ship to include
more common options.
I've been going back and forth on including the AD example domain or
not..I chose to include it after all. I think that quite many SSSD users
configure an AD domain and get confused often as per what ldap attribute
mappings they should use etc.
With the change I also implemented what Stephen suggested. I schedule all
callbacks to fire at tevent_timeval_current() directly, instead of scheduling
them one by one.