[SSSD] [PATCH] LDAP: Retry SID search based on result of LDAP search, not the return code

Jakub Hrozek jhrozek at redhat.com
Mon Jun 24 09:12:33 UTC 2013


On Mon, Jun 24, 2013 at 11:04:40AM +0200, Jakub Hrozek wrote:
> I think we didn't synchronize our changes with Sumit. The SID code
> doesn't retry correctly when looking up users-or-groups by SID. The
> attached patch fixes that.

btw I was wondering whether it would make change to reverse the order of
searches and first search for groups? It seems to me that during normal
operation we would be resolving a group SID more frequently..

Or maybe parallelize the searches because there would always be only two
(unlike search bases where IIRC we don't have a firm limit)



More information about the sssd-devel mailing list