[SSSD] [PATCHES] Handle nested groups in RFC2307bis (master)
Jakub Hrozek
jhrozek at redhat.com
Mon Oct 18 13:19:40 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/18/2010 02:01 PM, Stephen Gallagher wrote:
> On 10/18/2010 05:32 AM, Jakub Hrozek wrote:
>> On 10/15/2010 08:44 PM, Stephen Gallagher wrote:
>>> These patches are forward-ported from the work done in SSSD 1.2.4.
>
>>> Patch 0001: Add options for managing nested group limits.
>
>
>> Ack
>
> Self-nack. I forgot to add the new option to the SSSDConfig API.
>
>
Sorry, one more thing - can we add the option to the LDAP man page so it
is discoverable by users now that it can have an impact on the performance?
>>> Patch 0002: Shortcut out of sdap_save_users() if there are no users to
>>> save, rather than starting a useless LDB transaction.
>
>
>> Ack
>
>>> Patch 0003: Handle nested groups in RFC2307bis
>
>>> Like SSSD 1.2.4, these patches only handle the generic case of
>>> RFC2307bis and do not perform any of the optimizations available when
>>> memberOf support is available.
>
>> Ack with a question.
>
>> I'm wondering whether we could use ldap_group_nesting_level (or another
>> option..I know Ralf suggested a boolean at one point). If
>> ldap_group_nesting_level = 0 ("No nesting present in LDAP") then just
>> short-circuit to processing the group with sdap_process_group_send that,
>> unlike in 1.2 branch also handles RFC2307bis groups and has the bonus of
>> parallel searches.
>
>
> Good idea. Added to the patch.
>
Ack to patches 2 & 3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAky8SWwACgkQHsardTLnvCUfFwCgw7inlGtRKvhEnyXU4TZU+jTX
rkAAmwalxQ7ar4tmQhHHK+VEPNABUOR+
=PDgA
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list