https://issues.apache.org/bugzilla/show_bug.cgi?id=52464
Bug #: 52464
Summary: mod_authnz_ldap does expensive sub-group processing
prematurely
Product: Apache httpd-2
Version: 2.5-HEAD
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_authnz_ldap
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
When a group has lots of non-subgroup users in it, the default
AuthLDAPSubGroupAttribute will not screen out these users and mod_ldap will do
an ldap_compare to check if each user is of class AuthLDAPSubGroupClass to
determine if it's a subgroup.
This causes a large flat group to generate many compares / take a long time if
we check them for subgroups.
Meanwhile. AuthLDAPGroupAttribute makes us iterate through different
attributes, but we don't check all the attributes for a flat-group match before
trying subgroups.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
