[SSSD] [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings

Simo Sorce simo at redhat.com
Sun Apr 22 13:30:55 UTC 2012


On Sat, 2012-04-21 at 10:31 -0400, Stephen Gallagher wrote:
> On Fri, 2012-04-20 at 15:01 -0400, Stephen Gallagher wrote:
> > On Fri, 2012-04-13 at 12:34 +0200, Jan Zelený wrote:
> > So in the default case:
> > ldap_idmap_range_min = 100,001
> > ldap_idmap_range_max = 2,000,100,000
> > ldap_idmap_range_size = 100,000
> > 
> > 
> > So what this means is that we will have 2000 available slices each
> > capable of managing up to 100,000 IDs.
> 
> Clearly my math skills are failing me, because that should have been
> 20,000 available slices managing up to 100,000 IDs. This should be
> sufficient for most deployments and provide a very small window of hash
> collisions for the slice numbering.

/In FreeIPA we have 10k slices of 200k IDs, can we use the same ? 

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list