URL:
https://github.com/SSSD/sssd/pull/5300
Author: pbrezina
Title: #5300: ad: use parallel cldap ping for site discovery
Action: opened
PR body:
"""
This PR adds support for CLDAP (connectionless LDAP over UDP) and makes
use of it during site discovery.
The discovery process is improved, it now sends the CLDAP ping to all
discovered domain controllers at once to avoid potential timeouts when
some of them are unreachable (which is quite common in real environment).
The first received reply is used.
The netlogon information is now requested only when SSSD starts and when
we are recovering from offline state To avoid swamping network with many
ping. This is quite fine given the site and forest information is not
dynamic but usually stable.
Additional improvement is that if we already know client's site we ping
only in-site controllers first. We were already doing that but now we
also fallback to off-site controllers in case none in-site controller
is unreachable. Previously we would just fail.
There is a bug in openldap [1] that makes SSSD wait for timeout in-case none
of the controller is reachable, but as long as at least one is reachble
the resolution will be fast.
Resolves:
https://github.com/SSSD/sssd/issues/3743
https://github.com/SSSD/sssd/issues/5215
[1]
https://bugs.openldap.org/show_bug.cgi?id=9328
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/5300/head:pr5300
git checkout pr5300