On Tue, Apr 12, 2016 at 12:59:09PM +0200, Pavel Březina wrote:
On 04/01/2016 01:12 PM, Pavel Březina wrote:
>On 03/18/2016 05:09 PM, Sumit Bose wrote:
>>On Tue, Mar 15, 2016 at 04:50:48PM +0100, Lukas Slebodnik wrote:
>>>On (15/03/16 10:04), Pavel Březina wrote:
>>>>On 03/14/2016 12:12 PM, Sumit Bose wrote:
>>>>>Hi,
>>>>>
>>>>>this patch-set should solve
>>>>>https://fedorahosted.org/sssd/ticket/2158 by
>>>>>moving the main processing of the PAC data to the backends. The PAC
>>>>>responder now only has to send one request to the backend to look
>>>>>up the
>>>>>user based on its SID if the user's SID was not found in the
cache. I
>>>>>used the new cache_req here so the patches depend on Pavel's
latest
>>>>>cache_req patches which are currently under review.
>>>>>
>>>>>Since new IPA server can provided group-membership data to IPA
clients
>>>>>via the extdom plugin the most important test-cases are currently
>>>>>against older IPA servers e.g. version 3.3.3 provided by
>>>>>RHEL/CentOS 7.0
>>>>>(7.1 already has a newer version with enhanced extdom plugin).
>>>>>
>>>>>bye,
>>>>>Sumit
>>New version attached.
>
>Code-wise acked. Jakub aggreed to test it.
>
>CI:
http://sssd-ci.duckdns.org/logs/job/40/40/summary.html
Ack.
There are some confusing ldb_modify ENOENT errors in the logs due to the
order in which we store the users and groups are store but we agreed with
Sumit that it wouldn't be easy to suppress these messages.
I just corrected a link to one ticket in the comment and pushed the
patches:
* d0d7de66c9494621c1bc12384e41e5e38a77fbeb
* c371993cce13edb9185a5f0db76fbee03f0edc04
* 1df6751f81f7d9c225463f76b9789b0cc7a0de8b
* aa0f39c7c09a55efc8d2282ca56e0e93e220aeba
* 63b8e826f62d2e8930c872de7d4cc8b5bc15d4a4
* 28f336bdb32db0b89cb98174a3f8e308e4e928db
* 7cf0f78d832c7a09b59ee9f91cedc427c0253cd4
* cce3e8526176ce2fe9baa5bda1bb457b996b7bcf