On 05/10/2016 02:02 PM, Petr Cech wrote:
On 05/10/2016 11:57 AM, Pavel Březina wrote:
Hi,
Hello Pavel,
patches works as expected. I would like you to rename few things though... "locals" refers more to a resident and it is not being used in the meaning of local users and groups. I'd rather use the word "local" (singular), is_local (where boolean is used).
Addressed.
Please rename the new option into something more similar as entry_negative_timeou, maybe local_negative_timeout, unix_negative_timeout or files_negative_timeout...
Addressed.
Its man page description doesn't read well in english (especially the second sentence). Maybe something like this would be better:
Specifies for how many seconds nss_sss should keep local users and groups in negative cache before trying to look the up in the back end again.
Addressed.
Would it be beneficial to add some magic value (say -1) to represent permanent ncache record?
I don't think so. We haven't such behaviour yet. Permanent negcaching is set item by item by set function. And during discussion about negcaching of local users, the opinion has been that we didn't want it.
But if you know case for it I am open for it.
Can you add some debuggin to is_user_local_by_name and similar functions so we can see that local ncache timeout was used? Something like:
if (ret == EOK && pwd_result != NULL) { DEBUG(SSSDBG_TRACE_FUNC, "User %s is a local user\n", name); is_local = true; }
Addressed.
Thank you for review, Pavel.
Regards
CI failed http://sssd-ci.duckdns.org/logs/job/43/16/summary.html