[SSSD] Behaviour of getgrnam/getgrgid

Stephen Gallagher sgallagh at redhat.com
Wed Sep 15 19:24:02 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/15/2010 03:19 PM, Petter Reinholdtsen wrote:
> 
> I tested with 1.2.3, and the login was quick, but only the primary
> group was fetched from LDAP.  None of the other groups showed up with
> 'id' after I logged in with a clean cache (reinstalled machine).  Not
> quite sure if that was the intended behaviour, but it is unwanted for
> us that want to use sssd with NFS. :)
> 
> I have yet to test 1.3.x to see if this new problem also exist there.
> 

Yeah, I made a mistake when I wrote that speedup and forgot to account
for creating dummy entries for groups that don't currently exist on the
system.

The idea is that, instead of doing a slow recursive lookup of all groups
and members of those groups like we used to, we just looked at what
groups this user belongs to and manually added just that entry as a
member of the group on the local cache.

I just completely forgot to account for the case where that user's
groups hadn't already been cached on the system in some fashion (I
forgot to test from a clean cache situation).

Jakub is fixing my mistake as we speak. Expect a patch within a few days.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkyRHVEACgkQeiVVYja6o6NDawCffR/tv6AwUFB7xc56Wo9zqYzM
SbAAoIfmdfebtAgJAaGYMpYfo+Zv6onk
=/Z3Z
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list