sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-05-23	Adding option to disable retrieving large AD groups.	Lukas Slebodnik	1	-1/+2
	This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823
2012-05-10	LDAP: Handle very large Active Directory groups	Stephen Gallagher	1	-0/+33
	Active Directory 2008R2 allows only 1500 group members to be retrieved in a single lookup. However, when we hit such a situation, we can take advantage of the ASQ lookups, which are not similarly limited. With this patch, we will add any members found by ASQ that were not found by the initial lookup so we will end with a complete group listing. https://fedorahosted.org/sssd/ticket/783