[SSSD] [PATCH] Fix enumeration for IPA providers

Sumit Bose sbose at redhat.com
Mon Jun 1 09:35:02 UTC 2015


On Sun, May 31, 2015 at 07:50:10PM +0200, Jakub Hrozek wrote:
> On Mon, May 25, 2015 at 11:04:27AM +0200, Jakub Hrozek wrote:
> > Hi,
> > 
> > I found out that the IPA provider segfaults when it receives an
> > enumeration request. The first patch gets rid of the segfault, but there
> > would still be an error in the IPA provider is it would expect the
> > be_req contents to be usable for cache search. The second patch
> > shortcuts the enumeration request completely.
> > 
> > I even wonder if it was possible to shortcut the enumeration requests
> > sooner in the Data Provider and avoid sending them to the back ends
> > completely? Any downsides to this (except a possible 3rd party backend
> > that might allow an enumeration request on demand) ?
> > 
> > Finally, enumeration with IPA backend and ID views don't work at all,
> > but I wouldn't waste time with this at the moment -- just make sure that
> > we don't reqress.
> 
> Bump..

sorry for the delay. I wasn't able to reproduce the segfault even with
MALLOC_PERTURB_ but the changes in the first patch are a good idea
anyways.

Catching the enumeration requests as early as possible is a good idea as
well. We might even think about catching them already in the responders?
Maybe we can introduce some kind of feature map of the backends which
are given to the responder when connecting to the backend. Then the
responder can decide it it make sense to send the request to the backend
or just return data from the cache?

Nevertheless I didn't found and issue with the patches neither does
CI (http://sssd-ci.duckdns.org/logs/job/16/49/summary.html) so ACK.

bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list