[SSSD] [PATCH] remove left over principal selection

Jakub Hrozek jhrozek at redhat.com
Tue Oct 2 15:19:47 UTC 2012


On Tue, Oct 02, 2012 at 04:53:55PM +0200, Jakub Hrozek wrote:
> On Tue, Oct 02, 2012 at 12:02:38PM +0200, Pavel Březina wrote:
> > On 10/01/2012 09:15 PM, Jakub Hrozek wrote:
> > >On Wed, Sep 26, 2012 at 08:15:14PM +0200, Pavel Březina wrote:
> > >>https://fedorahosted.org/sssd/ticket/1303
> > >
> > >> From f5fb376ccd91ca307b5b47dbfe46048e4b868843 Mon Sep 17 00:00:00 2001
> > >>From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina at redhat.com>
> > >>Date: Tue, 25 Sep 2012 15:02:12 +0200
> > >>Subject: [PATCH] remove left over principal selection
> > >>
> > >>https://fedorahosted.org/sssd/ticket/1303
> > >>
> > >>Domain start up was taking too long when there are many principals
> > >>in a kerberos keytab. We were looking up in the keytab two times.
> > >>
> > >>The first time we try to select a proper principal and remember it.
> > >>The second call happens almost right after the first one and
> > >>it is just a check if the principal exists in the keytab, without
> > >>any output information other than success/failure. It is
> > >>probably a left over from https://fedorahosted.org/sssd/ticket/781.
> > >>
> > >>This patch removes the second call.
> > >
> > >In general I think you're right, but I think we should also add a call
> > >to select_principal_from keytab to the generic LDAP provider in case the
> > >LDAP with GSSAPI is configured in a similar fashion the we call
> > >select_principal_from_keytab from the AD and IPA providers.
> > 
> > As a part of this ticket?
> 
> No, let's do it later:
>     https://fedorahosted.org/sssd/ticket/1556
> 
> Ack to the patch originally attached to the thread.

Pushed to master.



More information about the sssd-devel mailing list