[SSSD] [PATCH][PRELIMINARY] sudo: send username and uid while requesting default options

Dmitri Pal dpal at redhat.com
Mon Apr 2 20:19:52 UTC 2012


On 03/30/2012 09:34 AM, Jakub Hrozek wrote:
> On Fri, Mar 30, 2012 at 01:23:10PM +0200, Pavel Březina wrote:
>> On 28.3.2012 17:33, Simo Sorce wrote:
>>> On Wed, 2012-03-28 at 10:09 -0400, Jakub Hrozek wrote:
>>>> On Tue, Mar 27, 2012 at 10:05:04AM +0200, Pavel Březina wrote:
>>>>> 2. store the pair (user,domainname) in the in-memory cache as well
>>>>> - find domain name in in-memory cache
>>>>> - if not found then perform initgroups, go into provider, ...
>>>>>
>>>>> - find default options in in-memory cache
>>>>> - if not found then go into provider, ...
>>>>>
>>>>> Advantage - faster, easier to implement
>>>>> Disadvantage - bigger memory dump if the sudo is used by many users
>>>>>
>>>>> I hope that this is understandable enough.
>>>>>
>>>> The cache places a timer on the cached data, so the memory is only
>>>> occupied for a short and defined period of time. I think the advantages
>>>> outweight the slightly bigger memory consumption, so I would prefer this
>>>> option.
>>> Why this data is not simply stored in LDB ?
>>>
>>> Simo.
>>>
>> I'm sorry, what data do you mean? The (user,domain) pair?
> We talked with Simo recently about abandoning the memory cache completely

Which memory cache you are referring to here?


> in favor of just performing LDB lookups(*) in order to avoid another cache
> level. Sorry, I just didn't catch you online yesterday to explain. I'll
> send you the IRC log in an e-mail.
>
> (*) unless the performance regresses drastically
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list