[SSSD] [PATCH] Use dereference to speed up RFC2307bis group processing

Simo Sorce simo at redhat.com
Thu May 12 22:21:10 UTC 2011


On Mon, 2011-05-09 at 10:20 -0400, Stephen Gallagher wrote:
> sdap_parse_deref() assumes that it can determine the mapping to use
> based on the objectClass, but this falls down in situations like Magic
> Private Groups, where user entries have both the posixAccount and
> posixGroup attribute.

This never happens, we tried that approach and too many clients failed
to handle it.
Magic Private Groups in IPA are created through the Managed Entries
plugin and are 2 separate objects now.

That said, if we can make the code work if such entries (with both
objectclasses) were found I'd like that.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list