[SSSD] [PATCH] IPA: Do not download or store the member attribute of host groups

Stephen Gallagher sgallagh at redhat.com
Tue Jun 25 12:38:21 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/25/2013 04:41 AM, Jakub Hrozek wrote:
> On Sun, Jun 23, 2013 at 09:12:01PM +0200, Jakub Hrozek wrote:
>> The attached patch applies on both master and sssd-1-9 and
>> fixes: https://fedorahosted.org/sssd/ticket/1806
>> 
>> The IPA provider attempted to store the original value of member
>> attribute to the cache. That caused the memberof plugin to
>> process the values which was really CPU intensive.
>> 
>> We don't use the values anywhere and rely on the originalDN
>> instead, so it's safe to avoid even downloading them.
>> 
>> Many thanks to Andreas and Simo for their help debugging the
>> problem.
> 
> Attached is also a sssd-1-5 version of the patch.
> 
> 

Ack (by inspection).

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlHJjz0ACgkQeiVVYja6o6Of1wCdGYN2KOO7mTWcFfH7T1bNK8Zx
v8sAnRV9puOQV/2eLg8iw/JXZEKLjEsW
=5hbY
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list