[SSSD] [PATCH] IPA: Do not download or store the member attribute of host groups

Jakub Hrozek jhrozek at redhat.com
Thu Jun 27 14:57:17 UTC 2013


On Tue, Jun 25, 2013 at 08:38:21AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 06/25/2013 04:41 AM, Jakub Hrozek wrote:
> > On Sun, Jun 23, 2013 at 09:12:01PM +0200, Jakub Hrozek wrote:
> >> The attached patch applies on both master and sssd-1-9 and
> >> fixes: https://fedorahosted.org/sssd/ticket/1806
> >> 
> >> The IPA provider attempted to store the original value of member
> >> attribute to the cache. That caused the memberof plugin to
> >> process the values which was really CPU intensive.
> >> 
> >> We don't use the values anywhere and rely on the originalDN
> >> instead, so it's safe to avoid even downloading them.
> >> 
> >> Many thanks to Andreas and Simo for their help debugging the
> >> problem.
> > 
> > Attached is also a sssd-1-5 version of the patch.
> > 
> > 
> 
> Ack (by inspection).
> 

Pushed to sssd-1-5



More information about the sssd-devel mailing list