On 03/18/2016 05:09 PM, Sumit Bose wrote:
> On Tue, Mar 15, 2016 at 04:50:48PM +0100, Lukas Slebodnik wrote:
>> On (15/03/16 10:04), Pavel Březina wrote:
>>> On 03/14/2016 12:12 PM, Sumit Bose wrote:
>>>> Hi,
>>>>
>>>> this patch-set should solve
>>>>
https://fedorahosted.org/sssd/ticket/2158 by
>>>> moving the main processing of the PAC data to the backends. The PAC
>>>> responder now only has to send one request to the backend to look
>>>> up the
>>>> user based on its SID if the user's SID was not found in the cache.
I
>>>> used the new cache_req here so the patches depend on Pavel's latest
>>>> cache_req patches which are currently under review.
>>>>
>>>> Since new IPA server can provided group-membership data to IPA clients
>>>> via the extdom plugin the most important test-cases are currently
>>>> against older IPA servers e.g. version 3.3.3 provided by
>>>> RHEL/CentOS 7.0
>>>> (7.1 already has a newer version with enhanced extdom plugin).
>>>>
>>>> bye,
>>>> Sumit
> New version attached.
Code-wise acked. Jakub aggreed to test it.
CI:
http://sssd-ci.duckdns.org/logs/job/40/40/summary.html
Ack.
There are some confusing ldb_modify ENOENT errors in the logs due to the
order in which we store the users and groups are store but we agreed
with Sumit that it wouldn't be easy to suppress these messages.