URL:
https://github.com/SSSD/sssd/pull/289
Author: fidencio
Title: #289: Check the timestamp cache during the users/groups cleanup
Action: edited
Changed field: body
Original value:
"""
This patch set basically changes the behaviour of the cleanup_user() and cleanup_groups()
functions used by ldap_id_cleanup().
With the current behaviour the searches for the users/groups to be cleaned up are always
done in the cache, while the up to date information about their expiration is kept in the
timestamp cache.
So, in order to fix [3389](https://pagure.io/SSSD/sssd/issue/3369), let's perform the
search in the timestamp cache whenever it's possible.
I'm really not sure whether the dn_filter I'm building is totally correct, so
I'd like to ask whoever review this patchset to take a careful look that the last
patch, specially in the cleanup_dn_filter() function.
The way I'm testing this issue is:
- I have a LDAP server with a few users and have the following options configured on
sssd.conf:
```
enumerate = true
ldap_enumeration_refresh_timeout = 35
ldap_purge_cache_timeout = 60
entry_cache_timeout = 20
```
"""