-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 11/04/2009 05:59 PM, Simo Sorce wrote:
This set of patches ends up fixing the initgroups call.
It still uses the slowest possible method, a future improvement is to
use the deref (IPA/DS/OpenLDAP) or the ASQ (AD) controls to reduce the
number of LDAP searches.
Patches 0001 though 0004 are dependencies for 0005
0001: add way to get a string w/o manually parsing the attributes
Ack
0002: make function public and move it to sdap.c
Ack
0003: this is also needed by the access modules, stores the original
memberof DNs
Ack
0004: remove redundant code and at the same time make it easier to
use
the generic search function for users and groups retrieval. With this
change it will be possible to reduce further code duplication my
changing the code that searches for users and groups to use the generic
search function (I plan to do this once the patch is accepted)
Ack
0005: initgroups call fixups make it work and have specialized code
depending on the schema used (still doesn't fully support nested groups
in AD, but that is not a priority right now)
Ack
I have tested it with an IPA 1.2 server and seem to work properly.
Simo.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkr0VpgACgkQeiVVYja6o6OIIgCcCkBBa2Zv6K/4sAObR6Mg2Uev
oIMAn2nZR1wPj/3Wx9QkzfUUKgst28Lu
=IqsB
-----END PGP SIGNATURE-----