This patch add possibility to replace whitespace in user and group names with
a specified string. With string "-", sssd will return the same result as
winbind enabled option "winbind normalize names"
patch is attached.
I was trying to help a user who had problems with the AD provider and
realized I had hard time following what exact server are we searching at
the time and, because we hit a referral, where the referral pointed to.
I wrote the two attached patches. I'm OK with keeping them in my local
tree, but if other developers agree, maybe we can include them upstream
The attached patch adds support for an "entry_cache_gpo_timeout" option, which allows an admin to specify how many seconds the backend should consider locally stored gpo policy files to be valid before asking the backend again. This is an additional performance enhancement (along with comparing gpo versions to avoid unnecessary downloads). The timeout is set when a gpo entry is stored in the cache (which only happens after policy files have been downloaded).
During the processing of a gpo, if the gpo's cache timeout has not elapsed, the backend does not interact with the gpo_child at all (and therefore doesn't download any files from the smb server). Rather, it re-uses the policy files that are already stored locally. Obviously, no gpo version comparisons need to be made in this case. If the timeout has elapsed (or there is no gpo entry in the cache), then the backend does interact with the gpo child in the usual manner (including comparing gpo versions to avoid unnecessary downloads). Note that the entry_cache_gpo_timeout option is *not* an expiration for the data in the gpo cache entry (which includes the cached_gpt_version). Indeed, the cached_gpt_version is never considered to be "expired".
Note that this patch does not add support for offline mode, which will be implemented in a subsequent patch.
Here is the fourth version of the patch adding CI tests.
Compared to the last one, this adds handling of libini_config-devel 1.1.0
being absent from most distributions, and adds support for Fedora Rawhide.
It relies on the three patches titled "Make sssd.spec.in work without
libini_config >= 1.1.0" I sent earlier today.
You can test it locally by executing "contrib/ci/run --help" and exercising
the few supported options on the supported distros.
this patch solves the ticket
I was able to reproduce the slowdowns that the
reported experienced by pausing a virtual machine
with the server. With this patch the slowdowns
no longer appear.
I use the already implemented function check_if_online
in the new periodic task. See patch description
for more details.
Patches for master and sssd-1-11 are in