On 02/25/2014 07:59 PM, Simo Sorce wrote:
> On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote:
>> Resending patch 0138 together with another case Simo found out today:
>> when authdata flag is cleared by admin for the service principal, we'll
>> get NULL client database entry. In such case we have to bail out.
> The patches look correct code-flow-wise to me.
> So tentative ack pending testing.
Just checking - are we ok performance wise? If we for example add one
additional LDAP search for every Kerberos authentication, it may increase the
load on our LDAP server.
Freeipa-devel mailing list