summaryrefslogtreecommitdiff
path: root/src/config/etc
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2011-04-29 15:59:17 +0200
committerStephen Gallagher <sgallagh@redhat.com>2011-05-20 07:21:45 -0400
commit7bdaf2a712d73763e7c3d25f6bb544b18f7028eb (patch)
treedca11da1c2c4b258d4bc33aed583d9ba48147f27 /src/config/etc
parent6b95a91c1a49c2eff480820cfd8be51d70a29ffe (diff)
downloadsssd-7bdaf2a712d73763e7c3d25f6bb544b18f7028eb.tar.gz
sssd-7bdaf2a712d73763e7c3d25f6bb544b18f7028eb.tar.bz2
sssd-7bdaf2a712d73763e7c3d25f6bb544b18f7028eb.zip
Use dereference when processing RFC2307bis nested groups
Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799
Diffstat (limited to 'src/config/etc')
-rw-r--r--src/config/etc/sssd.api.d/sssd-ipa.conf2
-rw-r--r--src/config/etc/sssd.api.d/sssd-ldap.conf1
2 files changed, 3 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.d/sssd-ipa.conf b/src/config/etc/sssd.api.d/sssd-ipa.conf
index 7719069c..75222250 100644
--- a/src/config/etc/sssd.api.d/sssd-ipa.conf
+++ b/src/config/etc/sssd.api.d/sssd-ipa.conf
@@ -35,6 +35,8 @@ ldap_referrals = bool, None, false
ldap_krb5_ticket_lifetime = int, None, false
ldap_dns_service_name = str, None, false
ldap_deref = str, None, false
+ldap_page_size = int, None, false
+ldap_deref_threshold = int, None, false
[provider/ipa/id]
ldap_search_timeout = int, None, false
diff --git a/src/config/etc/sssd.api.d/sssd-ldap.conf b/src/config/etc/sssd.api.d/sssd-ldap.conf
index e568c74d..ce9ec513 100644
--- a/src/config/etc/sssd.api.d/sssd-ldap.conf
+++ b/src/config/etc/sssd.api.d/sssd-ldap.conf
@@ -28,6 +28,7 @@ ldap_krb5_ticket_lifetime = int, None, false
ldap_dns_service_name = str, None, false
ldap_deref = str, None, false
ldap_page_size = int, None, false
+ldap_deref_threshold = int, None, false
[provider/ldap/id]
ldap_search_timeout = int, None, false