[SSSD] RFC: Enumerations and sssd drivers

Stephen Gallagher sgallagh at redhat.com
Thu Aug 13 13:27:54 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/13/2009 08:38 AM, Simo Sorce wrote:
> On Thu, 2009-08-13 at 08:54 -0400, Stephen Gallagher wrote:
>>> NOTE: this means that until the first background enumeration is
>>> complete, a getent passwd or a getent group call may return incomplete
>>> results. I think this is acceptable as it will really happen only at
>>> startup, when the daemon caches are empty.
>>>
>> I disagree. If we're going to have a startup enumeration, then we should
>> simply not enable handling NSS requests until that first enumeration is
>> complete. Incomplete results can be worse than no results. I assume NSS
>> has a return code for temporary failure?
> 
> Internally, yes, but all it does it to return no results to the user
> space. Not returning results is == returning partial results. So I see
> no difference here.

I was referring to having our NSS client-side component return TRYAGAIN
or UNAVAIL instead of zero results, since the nsswitch.conf file can be
configured to handle these appropriately.

- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkqEFNoACgkQeiVVYja6o6O12wCgjcEFIYINKuXI74whaKruw4NA
uYUAoLIqq8RspTsstTs9P4E6zzvsvXO/
=VZTe
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list