[SSSD] [PATCH] The new memberof plugin

Trond Hasle Amundsen t.h.amundsen at usit.uio.no
Mon Sep 26 09:46:57 UTC 2011


Jan Zelený <jzeleny at redhat.com> writes:

> After further consulation on IRC, I finally found the bug and fixed
> it. Sending patches in attachment.

Hello Jan,

I'm happy to report that this updated version of the memberof patch
passes all tests during 'make check'.

However, when used in a real environment, it works with small groups but
has problems with larger groups. I tried running 'getent group
somegroup' for different groups, and found that groups with more than
~1000 members aren't handled properly:

  * 'getent group somegroup' never returns anything

  * 'id someuser' hangs indefinately for some users. This seems to
    happen if the user is a member of one or more large groups. The
    limit for "large group" seems to be higher in this case though.

  * 'id -G someuser' works for any user.

Another observation: sssd_be can't be killed by anything but a SIGKILL,
if any of the above problems have occured. When in this state, sssd_be
doesn't consume CPU. When issuing 'getent group largegroup' sssd_be
starts consuming CPU as expected, then abruptly stops using CPU and
enters the unkillable state.

Regards,
-- 
Trond H. Amundsen <t.h.amundsen at usit.uio.no>
Center for Information Technology Services, University of Oslo



More information about the sssd-devel mailing list