[SSSD] [PATCHES] Handle nested groups in RFC2307bis (master)

Jakub Hrozek jhrozek at redhat.com
Mon Oct 18 09:32:27 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/15/2010 08:44 PM, Stephen Gallagher wrote:
> These patches are forward-ported from the work done in SSSD 1.2.4.
> 
> Patch 0001: Add options for managing nested group limits.
> 

Ack

> Patch 0002: Shortcut out of sdap_save_users() if there are no users to
> save, rather than starting a useless LDB transaction.
> 

Ack

> Patch 0003: Handle nested groups in RFC2307bis
> 
> Like SSSD 1.2.4, these patches only handle the generic case of
> RFC2307bis and do not perform any of the optimizations available when
> memberOf support is available.

Ack with a question.

I'm wondering whether we could use ldap_group_nesting_level (or another
option..I know Ralf suggested a boolean at one point). If
ldap_group_nesting_level = 0 ("No nesting present in LDAP") then just
short-circuit to processing the group with sdap_process_group_send that,
unlike in 1.2 branch also handles RFC2307bis groups and has the bonus of
parallel searches.

	Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAky8FCsACgkQHsardTLnvCVO6QCfe15pTHqaabaVS3nW7hmpxY0J
TEMAn3PbNUkUxNxo2n4ST/S/bs/np48S
=zqMt
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list