On 12/02/2015 02:18 PM, Pavel Reichl wrote:
Hello,
I decided to share this design document although it still a work in progress. Attached
patches are just prove of concept and are very much work in progress. So far patches also
defers from design in order in which secondary slices are generated.
Thanks for feedback on this early state of effort.
Bye.
https://fedorahosted.org/sssd/wiki/IdmapAutoAssignNewSlices
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org
Hello, attached patches are still work in progress - I mainly addressed Sumit's
comments focused on:
1) Changing secondary slices from arrays to link list (to make adding new slices easy in
sid_to_unix()).
2) Added new function sss_idmap_add_auto_domain_ex() which adds secondary slices -
it's not a good idea to add secondary slices in sss_idmap_add_domain_ex() because
it's called by IPA which won't use them.
3) Changing sss_idmap_sid_to_unix() to always generate new secondary slice if RID is out
of scope of currently allocated secondary slices.
4) And other smaller fixes.
Also, option ldap_idmap_extra_slice_max was added and patch was refactored to remove code
duplication.
I still need to increase code coverage and do more testing.
Bye.