[SSSD] [PATCHES] Handle nested groups in RFC2307bis (master)

Stephen Gallagher sgallagh at redhat.com
Mon Oct 18 12:01:42 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/18/2010 05:32 AM, Jakub Hrozek wrote:
> On 10/15/2010 08:44 PM, Stephen Gallagher wrote:
>> These patches are forward-ported from the work done in SSSD 1.2.4.
> 
>> Patch 0001: Add options for managing nested group limits.
> 
> 
> Ack

Self-nack. I forgot to add the new option to the SSSDConfig API.

> 
>> Patch 0002: Shortcut out of sdap_save_users() if there are no users to
>> save, rather than starting a useless LDB transaction.
> 
> 
> Ack
> 
>> Patch 0003: Handle nested groups in RFC2307bis
> 
>> Like SSSD 1.2.4, these patches only handle the generic case of
>> RFC2307bis and do not perform any of the optimizations available when
>> memberOf support is available.
> 
> Ack with a question.
> 
> I'm wondering whether we could use ldap_group_nesting_level (or another
> option..I know Ralf suggested a boolean at one point). If
> ldap_group_nesting_level = 0 ("No nesting present in LDAP") then just
> short-circuit to processing the group with sdap_process_group_send that,
> unlike in 1.2 branch also handles RFC2307bis groups and has the bonus of
> parallel searches.
> 

Good idea. Added to the patch.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAky8NyYACgkQeiVVYja6o6PiBACgne3iTDc9PZ4rOJNHryrWvtKX
ZQwAmgL7WD9kPYoQcIZi9dflLLct2XgJ
=iihG
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-option-to-limit-nested-groups.patch
Type: text/x-patch
Size: 5119 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Make-sdap_save_users_send-handle-zero-users-graceful.patch
Type: text/x-patch
Size: 1044 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Handle-nested-groups-in-RFC2307bis.patch
Type: text/x-patch
Size: 25901 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-option-to-limit-nested-groups.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Make-sdap_save_users_send-handle-zero-users-graceful.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment-0001.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Handle-nested-groups-in-RFC2307bis.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101018/01c03222/attachment-0002.sig>


More information about the sssd-devel mailing list