Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-29 Thread Paul B. Henson
On 10/26/2012 2:25 AM, Jakub Hrozek wrote: I compiled the latest 1.9.2 source release on a test RHEL6 system, and it does indeed have a dramatic performance improvement: # time getent group members 1.8.0 -- 1m29.589s 1.9.2 -- 0m5.968s # time getent group students 1.8.0 -- 0m44.735s 1.9.2 -- 0m

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-26 Thread Stephen Gallagher
On 10/25/2012 06:59 PM, Dmitri Pal wrote: On 10/25/2012 06:38 PM, Paul B. Henson wrote: On 10/25/2012 9:41 AM, Dmitri Pal wrote: BTW SSSD connects in an authenticated way. I assume you mean it supports connecting with authentication; considering I have provided it no credentials I would be s

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-26 Thread Jakub Hrozek
On Thu, Oct 25, 2012 at 03:21:26PM -0700, Paul B. Henson wrote: > On 10/25/2012 4:03 AM, Jakub Hrozek wrote: > > >There has also been many performance improvements done during the 1.9 > >development. I would suggest that you try the 1.9 packages to see if the > >performance is acceptable for you.

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-26 Thread Jakub Hrozek
On Thu, Oct 25, 2012 at 03:13:17PM -0700, Paul B. Henson wrote: > On 10/25/2012 2:43 AM, Stephen Gallagher wrote: > > >Paul, this has been proposed as > >https://fedorahosted.org/sssd/ticket/1376 which is currently slated for > >inclusion in SSSD 1.10. You're not the first person to request this >

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Dmitri Pal
On 10/25/2012 06:38 PM, Paul B. Henson wrote: > On 10/25/2012 9:41 AM, Dmitri Pal wrote: > >> BTW SSSD connects in an authenticated way. > > I assume you mean it supports connecting with authentication; > considering I have provided it no credentials I would be surprised and > disconcerted if it wa

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Paul B. Henson
On 10/25/2012 9:41 AM, Dmitri Pal wrote: BTW SSSD connects in an authenticated way. I assume you mean it supports connecting with authentication; considering I have provided it no credentials I would be surprised and disconcerted if it was doing anything other than an anonymous bind in my c

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Dmitri Pal
On 10/25/2012 06:13 PM, Paul B. Henson wrote: > On 10/25/2012 2:43 AM, Stephen Gallagher wrote: > >> Paul, this has been proposed as >> https://fedorahosted.org/sssd/ticket/1376 which is currently slated for >> inclusion in SSSD 1.10. You're not the first person to request this >> functionality, bu

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Paul B. Henson
On 10/25/2012 4:03 AM, Jakub Hrozek wrote: There has also been many performance improvements done during the 1.9 development. I would suggest that you try the 1.9 packages to see if the performance is acceptable for you. I compiled the latest 1.9.2 source release on a test RHEL6 system, and i

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Paul B. Henson
On 10/25/2012 2:43 AM, Stephen Gallagher wrote: Paul, this has been proposed as https://fedorahosted.org/sssd/ticket/1376 which is currently slated for inclusion in SSSD 1.10. You're not the first person to request this functionality, but it just hasn't been implemented yet. Cool. Is anybody a

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Dmitri Pal
On 10/24/2012 08:09 PM, Paul B. Henson wrote: > On 10/24/2012 3:13 PM, Dmitri Pal wrote: > >> SSSD has the ability to use enumeration. In this case you pay the price >> once in advance and then the cache is updated in the background. That >> might be a solution for your use case. > > Honestly, I ha

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Jakub Hrozek
On Thu, Oct 25, 2012 at 05:43:12AM -0400, Stephen Gallagher wrote: > On 10/24/2012 05:49 PM, Paul B. Henson wrote: > >We're working on transitioning from RHEL5 to RHEL6 and have run into a > >bit of a problem with sssd and our ldap integration. > > > >We have a number of groups with a very large nu

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-25 Thread Stephen Gallagher
On 10/24/2012 05:49 PM, Paul B. Henson wrote: We're working on transitioning from RHEL5 to RHEL6 and have run into a bit of a problem with sssd and our ldap integration. We have a number of groups with a very large number of members, which took excessively long with nss_ldap to retrieve. We impl

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-24 Thread Paul B. Henson
On 10/24/2012 3:13 PM, Dmitri Pal wrote: SSSD has the ability to use enumeration. In this case you pay the price once in advance and then the cache is updated in the background. That might be a solution for your use case. Honestly, I have zero interest in trying to replicate my entire LDAP di

Re: [SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-24 Thread Dmitri Pal
On 10/24/2012 05:49 PM, Paul B. Henson wrote: > We're working on transitioning from RHEL5 to RHEL6 and have run into a > bit of a problem with sssd and our ldap integration. > > We have a number of groups with a very large number of members, which > took excessively long with nss_ldap to retrieve.

[SSSD-users] sssd equivilent of nss_ldap nss_getgrent_skipmembers?

2012-10-24 Thread Paul B. Henson
We're working on transitioning from RHEL5 to RHEL6 and have run into a bit of a problem with sssd and our ldap integration. We have a number of groups with a very large number of members, which took excessively long with nss_ldap to retrieve. We implemented the nss_getgrent_skipmembers feature for