[sssd PR#455][opened] mmap_cache: make checks independent of input size
by sumit-bose
URL: https://github.com/SSSD/sssd/pull/455
Author: sumit-bose
Title: #455: mmap_cache: make checks independent of input size
Action: opened
PR body:
"""
Currently the consistency checks for the mmap_cache payload data on the
client and the responder side include the length of the input string of
the current request. Since there might be hash collisions which other
much longer or much shorter names those checks might fail although there
is no data corruption.
This patch removes the checks using the length of the input and adds a
check if the name found in the payload is zero-terminated inside of the
payload data.
Resolves https://pagure.io/SSSD/sssd/issue/3571
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/455/head:pr455
git checkout pr455
6 years, 4 months
[sssd PR#450][opened] sysdb: do not use objectClass for users and groups
by sumit-bose
URL: https://github.com/SSSD/sssd/pull/450
Author: sumit-bose
Title: #450: sysdb: do not use objectClass for users and groups
Action: opened
PR body:
"""
The majority of the object in the SSSD cache are users and groups. If there
are many user and groups in the cache the index objects of the objectclass
attributes 'user' and 'group' become large because the must hold
references to all objects of those object classes.
As a result the management of these index objects becomes costly because
they must be parsed and split apart quite often. Additionally they are
mostly useless because user and groups are lookup up by more specific
attributes in general.
Only when enumerating all user or groups this kind of index might be
useful.
There are two way of removing this kind of index from the user and group
objects. Either by removing objectClass from the list of indexes and add a
new attribute to all other type of object we want and index for. Or by
replacing objectClass with a different attribute for the user and group
objects. After some testing I think the latter one is the more reliable one
and implemented it in this patch.
Related to https://pagure.io/SSSD/sssd/issue/3503
Additionally this patch set removes the one-level search index IDXONE and
replaces LDB_SCOPE_ONELEVEL searches with LDB_SCOPE_SUBTREE searches in the
callers.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/450/head:pr450
git checkout pr450
6 years, 4 months