[SSSD] [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings

Stephen Gallagher sgallagh at redhat.com
Sat Apr 21 14:31:09 UTC 2012


On Fri, 2012-04-20 at 15:01 -0400, Stephen Gallagher wrote:
> On Fri, 2012-04-13 at 12:34 +0200, Jan Zelený wrote:
> So in the default case:
> ldap_idmap_range_min = 100,001
> ldap_idmap_range_max = 2,000,100,000
> ldap_idmap_range_size = 100,000
> 
> 
> So what this means is that we will have 2000 available slices each
> capable of managing up to 100,000 IDs.

Clearly my math skills are failing me, because that should have been
20,000 available slices managing up to 100,000 IDs. This should be
sufficient for most deployments and provide a very small window of hash
collisions for the slice numbering.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120421/2f711d3b/attachment.sig>


More information about the sssd-devel mailing list