[SSSD] Design discussion: Wildcard Data Provider requests

Pavel Březina pbrezina at redhat.com
Mon Mar 9 12:25:22 UTC 2015


On 03/09/2015 12:50 PM, Jakub Hrozek wrote:
> On Mon, Mar 09, 2015 at 11:52:04AM +0100, Pavel Březina wrote:
>> Can we not use the ldap_ prefix since this option is supposed to be present
>> also in responder?
>
> Well, I don't think it should be used in the responder. I think the
> responder should just request whatever it needs to and let storing the
> data to cache for the Data Provider.
>
> What we can do is to return a DP error to make it clear that DP hit a
> sizelimit and the result might be incorrect, but that's it.

You can have multiple domains, therefore you want to limit both dp 
request and ifp request. At least this was agreed on.




More information about the sssd-devel mailing list