Re: slow login with sssd and ldap config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 06/10/2010 05:50 AM, Eric Doutreleau wrote:
> ahhh i took a day to write the mail and i found the solution 5 minutes
> just after write the mail
>
> i add
> ldap_group_search_base = ou=Groups,dc=int-evry,dc=fr
> and it s far faster
>
> sorry to have disturbed
>

Hmm, this shouldn't have had a direct effect. If unspecified, 
ldap_group_search_base should default to being the same as 
ldap_search_base. Unless your LDAP server is incredibly large (and no 
indexing is being performed), setting this should not have a measurable 
effect. The primary purpose for this option is for LDAP deployments 
where users and groups are in vastly disparate sections of the tree.

I'm more concerned that there's a bug in our processing when only one of 
the two options is specified. I'm CCing one of our upstream QE engineers 
to try and reproduce your original performance issue. I think you may 
have found a bug here.

Eric, if you would also be willing to try it, I'm curious if you still 
see this problem with only ldap_search_base specified (without 
ldap_user_search_base and ldap_group_search_base)



-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux