[SSSD] [PATCHES] Use entry USN when available

Sumit Bose sbose at redhat.com
Mon Dec 6 14:29:44 UTC 2010


On Mon, Dec 06, 2010 at 09:14:45AM -0500, Simo Sorce wrote:
> On Mon, 6 Dec 2010 14:57:33 +0100
> Sumit Bose <sbose at redhat.com> wrote:
> 
> > > I use value because when USNs are not available that thing contains
> > > the max modifyTimestamp, so I wanted to make sure people think
> > > about it when they see it.
> > 
> > ok, what about max_(user|group)_ref_value ? Maybe someone else has a
> > good idea, too? It is just that my first, second and third toughts
> > when reading max_user_value were not related to the USN or
> > modifyTimestamps, but to UIDs or usernames. But I agree, that
> > max_group_usn, might be to restricted here.
> 
> What does _ref_ stands for ? Refresh ?
> max_user|group_refresh_val ?

ok, let's keep it as it is. If someone will find a more crisp name it
can be changed later.

> 
> > > > Maybe it is easier for the LDAP server to optimize a search filter
> > > > with (!(%s<=%s)) instead of (%s>=%s)(!(%s=%s)) ?
> > > 
> > > I haven't changed the original filters, I can create an additional
> > > patch for this if you like.
> > 
> > I leave this up to you. This was more a question than a suggestion to
> > change it. I'm not sure how LDAP servers try to optimize this kind of
> > queries and just thought that a shorter condition might be easier to
> > optimize. On the other hand '(%s>=%s)(!(%s=%s))' might be easier to
> > understand for the human eye.
> 
> My thinking is that the current form may be more efficient, depending
> on how indexes and filter parsing are optimized by the server.
> I'll leave it as is for now.

ok

> 
> > > > OpenLDAP users might be happy if sssd would be able to autodetect
> > > > OpenLDAP and use entryCSN. Do you think check for the
> > > > OpenLDAProotDSE objectclass would be sufficient here?
> > > 
> > > Yes, give me the details and I can add that easily.
> > 
> > I think the only detail is the OpenLDAProotDSE objectclass. I haven't
> > found anything else in the OpenLDAP rootDSE which can help here.
> 
> Which attribute does openLdap uses on entries ?
> entryUSN or USNChanged ?

entryCSN, see http://www.openldap.org/faq/data/cache/1145.html for
details.

bye,
Sumit

> 
> Simo.
> 
> -- 
> Simo Sorce * Red Hat, Inc * New York
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list