[SSSD] sssd & ldap

Jakub Hrozek jhrozek at redhat.com
Tue Dec 18 15:04:18 UTC 2012


On Tue, Dec 18, 2012 at 03:11:25PM +0100, François Dagorn wrote:
> 
> > I'm not entirely sure I understood your problem, but it seems the LDAP
> > server admin is complaining that the SSSD is putting high load on the
> > server, right? 
> > 
> 
> Yes.
> 
> > The above search requires the uid, uidNumber and gidNumber attributes to
> > be indexed in order to be efficient. I think they usually are in most
> > server deployments..
> >
> 
> The question is why these attributes are involved to get logged, I was hopping
> that only the uid one would be necessary.

We also limit our search to entries that only contain valid UID and GID
numbers. Unless you are performing ID mapping against an AD server, all
valid users must have UID and GID anyway.



More information about the sssd-devel mailing list