[SSSD] [PATCH][PRELIMINARY] sudo: send username and uid while requesting default options

Simo Sorce simo at redhat.com
Wed Mar 28 15:33:54 UTC 2012


On Wed, 2012-03-28 at 10:09 -0400, Jakub Hrozek wrote:
> On Tue, Mar 27, 2012 at 10:05:04AM +0200, Pavel Březina wrote:
> > 2. store the pair (user,domainname) in the in-memory cache as well
> > - find domain name in in-memory cache
> > - if not found then perform initgroups, go into provider, ...
> > 
> > - find default options in in-memory cache
> > - if not found then go into provider, ...
> > 
> > Advantage - faster, easier to implement
> > Disadvantage - bigger memory dump if the sudo is used by many users
> > 
> > I hope that this is understandable enough.
> > 
> 
> The cache places a timer on the cached data, so the memory is only
> occupied for a short and defined period of time. I think the advantages
> outweight the slightly bigger memory consumption, so I would prefer this
> option.

Why this data is not simply stored in LDB ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list