On 04/23/2012 06:34 PM, Pavel Březina wrote:
On 04/23/2012 05:04 PM, Pavel Březina wrote:
> Hello everybody,
> here is the first set of patches for the new sudo clothes. [1]
>
> As it does not touch the responder, I believe it does not require the
> patches from the other preliminary sudo thread (already acked). However
> it was written atop them.
>
> [2/10]
> This is the main change for the async processing of the sudo rules. It
> make sdap_sudo_refresh_send() more generic by adding there two filters:
> ldap_filter - used for search in the LDAP
> sysdb_filter - used for a deletion of the rules from sysdb
>
> This way we can have many different refresh styles without touching
> this fundamental function.
>
> From this patch further the provider will return an error to the
> responder making it unusable.
>
> [...]
> The rest of the patches has a self-describing subject. Don't be afraid
> of the count, these patches are very small :-)
>
> The next set of patches is where the fun begin, so be patient :-)
>
> [1]
https://fedorahosted.org/sssd/wiki/DesignDocs/SUDOCachingRules
Ok, I made a mistake already in the 3rd patch, I'm sending it again :)
Sending new set of patches if you want to take a look.
Full periodical updates should run fine, there are preparations for the
smart update. I'm going to ignore modifyTimestamp for now and use only
entryUSN if available.
It also does not filter the rules by host, I plan to add it as one of
the last things.