[SSSD] [PATCH] IPA: Do not download or store the member attribute of host groups
Stephen Gallagher
sgallagh at redhat.com
Tue Jun 25 12:38:21 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/25/2013 04:41 AM, Jakub Hrozek wrote:
> On Sun, Jun 23, 2013 at 09:12:01PM +0200, Jakub Hrozek wrote:
>> The attached patch applies on both master and sssd-1-9 and
>> fixes: https://fedorahosted.org/sssd/ticket/1806
>>
>> The IPA provider attempted to store the original value of member
>> attribute to the cache. That caused the memberof plugin to
>> process the values which was really CPU intensive.
>>
>> We don't use the values anywhere and rely on the originalDN
>> instead, so it's safe to avoid even downloading them.
>>
>> Many thanks to Andreas and Simo for their help debugging the
>> problem.
>
> Attached is also a sssd-1-5 version of the patch.
>
>
Ack (by inspection).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlHJjz0ACgkQeiVVYja6o6Of1wCdGYN2KOO7mTWcFfH7T1bNK8Zx
v8sAnRV9puOQV/2eLg8iw/JXZEKLjEsW
=5hbY
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list