Gary Winiger wrote:
>
>> If you have complex netgroups and use them with passwd compat mode then
>> there can be a noticeable and significant delay on every getpw*() call.
>> This is due to the need to walk the netgroup to find the user, this is
>> made worse because netgroups are not cached by nscd (but that is a
>> story for another day).
>>
>
> Is this project still needed? Sparks is planned for the next
> update release of S10. Shouldn't it handle the performance
> issues noted here?
>
No, Sparks will not fully address the performance issues. Netgroups
are not cached by nscd even
with Sparks. The performance is also worsened when nsswitch compat
mode is used.
The proposed pam_list module in this ARC case avoids hitting the
above 2 botttle necks.
I received requests from customers like Citigroup, Google and Barclay
Capital to get pam_list officially
in Solaris. Its actually a Solaris 10 adoption issue for Citigroup
and Google.
thanks,
Satish
