[SSSD] [PATCHES] Handle nested groups in RFC2307bis (master)

Jakub Hrozek jhrozek at redhat.com
Mon Oct 18 13:19:40 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/18/2010 02:01 PM, Stephen Gallagher wrote:
> On 10/18/2010 05:32 AM, Jakub Hrozek wrote:
>> On 10/15/2010 08:44 PM, Stephen Gallagher wrote:
>>> These patches are forward-ported from the work done in SSSD 1.2.4.
> 
>>> Patch 0001: Add options for managing nested group limits.
> 
> 
>> Ack
> 
> Self-nack. I forgot to add the new option to the SSSDConfig API.
> 
> 

Sorry, one more thing - can we add the option to the LDAP man page so it
is discoverable by users now that it can have an impact on the performance?

>>> Patch 0002: Shortcut out of sdap_save_users() if there are no users to
>>> save, rather than starting a useless LDB transaction.
> 
> 
>> Ack
> 
>>> Patch 0003: Handle nested groups in RFC2307bis
> 
>>> Like SSSD 1.2.4, these patches only handle the generic case of
>>> RFC2307bis and do not perform any of the optimizations available when
>>> memberOf support is available.
> 
>> Ack with a question.
> 
>> I'm wondering whether we could use ldap_group_nesting_level (or another
>> option..I know Ralf suggested a boolean at one point). If
>> ldap_group_nesting_level = 0 ("No nesting present in LDAP") then just
>> short-circuit to processing the group with sdap_process_group_send that,
>> unlike in 1.2 branch also handles RFC2307bis groups and has the bonus of
>> parallel searches.
> 
> 
> Good idea. Added to the patch.
> 

Ack to patches 2 & 3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAky8SWwACgkQHsardTLnvCUfFwCgw7inlGtRKvhEnyXU4TZU+jTX
rkAAmwalxQ7ar4tmQhHHK+VEPNABUOR+
=PDgA
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list