>From c883989e52cd770c19e8b23f0a64195569c30ccb Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 30 Mar 2015 18:34:42 +0200 Subject: [PATCH 2/3] nss: Use negcache for getbysid requests --- src/responder/nss/nsssrv_cmd.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/responder/nss/nsssrv_cmd.c b/src/responder/nss/nsssrv_cmd.c index 72da865d0bbe2142799a93415f0a645ae9cac13d..45d65717312f90cadb88f3a7334aca0629e33d58 100644 --- a/src/responder/nss/nsssrv_cmd.c +++ b/src/responder/nss/nsssrv_cmd.c @@ -4539,6 +4539,15 @@ static errno_t nss_cmd_getbysid_search(struct nss_dom_ctx *dctx) return EIO; } + /* verify this user has not yet been negatively cached, + * or has been permanently filtered */ + ret = sss_ncache_check_sid(nctx->ncache, nctx->neg_timeout, cmdctx->secid); + if (ret == EEXIST) { + DEBUG(SSSDBG_TRACE_FUNC, + "SID [%s] does not exist! (negative cache)\n", cmdctx->secid); + return ENOENT; + } + ret = sysdb_search_object_by_sid(cmdctx, dom, cmdctx->secid, NULL, &dctx->res); if (ret == ENOENT) { -- 2.1.0