[SSSD] [PATCH] IPA: Do not download or store the member attribute of host groups
Jakub Hrozek
jhrozek at redhat.com
Thu Jun 27 14:57:17 UTC 2013
On Tue, Jun 25, 2013 at 08:38:21AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 06/25/2013 04:41 AM, Jakub Hrozek wrote:
> > On Sun, Jun 23, 2013 at 09:12:01PM +0200, Jakub Hrozek wrote:
> >> The attached patch applies on both master and sssd-1-9 and
> >> fixes: https://fedorahosted.org/sssd/ticket/1806
> >>
> >> The IPA provider attempted to store the original value of member
> >> attribute to the cache. That caused the memberof plugin to
> >> process the values which was really CPU intensive.
> >>
> >> We don't use the values anywhere and rely on the originalDN
> >> instead, so it's safe to avoid even downloading them.
> >>
> >> Many thanks to Andreas and Simo for their help debugging the
> >> problem.
> >
> > Attached is also a sssd-1-5 version of the patch.
> >
> >
>
> Ack (by inspection).
>
Pushed to sssd-1-5
More information about the sssd-devel
mailing list