[SSSD] [PATCH][PRELIMINARY] sudo: send username and uid while requesting default options

Pavel Březina pbrezina at redhat.com
Fri Mar 30 11:23:10 UTC 2012


On 28.3.2012 17:33, Simo Sorce wrote:
> On Wed, 2012-03-28 at 10:09 -0400, Jakub Hrozek wrote:
>> On Tue, Mar 27, 2012 at 10:05:04AM +0200, Pavel Březina wrote:
>>> 2. store the pair (user,domainname) in the in-memory cache as well
>>> - find domain name in in-memory cache
>>> - if not found then perform initgroups, go into provider, ...
>>>
>>> - find default options in in-memory cache
>>> - if not found then go into provider, ...
>>>
>>> Advantage - faster, easier to implement
>>> Disadvantage - bigger memory dump if the sudo is used by many users
>>>
>>> I hope that this is understandable enough.
>>>
>>
>> The cache places a timer on the cached data, so the memory is only
>> occupied for a short and defined period of time. I think the advantages
>> outweight the slightly bigger memory consumption, so I would prefer this
>> option.
>
> Why this data is not simply stored in LDB ?
>
> Simo.
>

I'm sorry, what data do you mean? The (user,domain) pair?



More information about the sssd-devel mailing list