[
https://issues.apache.org/jira/browse/KNOX-3533?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18139480#comment-18139480
]
ASF subversion and git services commented on KNOX-3533:
-------------------------------------------------------
Commit 84522e8bd182d21a031c0e3df8c9e4c5c449615d in knox's branch
refs/heads/master from David Han
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=84522e8bd ]
KNOX-3533: Skip group membership resolution in LdapProxyBackend when memberOf
is not requested (#1475)
> LDAP Proxy skips expensive member lookup if memberOf attribute not requested
> ----------------------------------------------------------------------------
>
> Key: KNOX-3533
> URL: https://issues.apache.org/jira/browse/KNOX-3533
> Project: Apache Knox
> Issue Type: Improvement
> Components: Server
> Affects Versions: 3.1.0
> Reporter: David Han
> Assignee: David Han
> Priority: Major
> Fix For: 3.1.0
>
>
> Group membership lookup in the LdapProxyBackend is an expensive operation
> because it submits multiple search requests to the backend to calculate group
> memberships if the backend doesn't support memberOf or to calculate
> transitive group memberships. This is unnecessary if the search request does
> not include the memberOf attribute. In that case, skip the expensive
> calculation.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
