On Thu, 8 Jan 2004, ROUTIER Gilles wrote: > The autthentification by groups LDAP functions by chance. > > As an information we have 26 groups and in group between 30 and 100 users. > > How many groups can one list you with squid_ldap_group? > Is there a limitation with 10 goupes, 16 groups, etc?
There is no direct limit in number, but the total amount of characters login group group ... must not exceed 256. If it does then things will get very confusing. This limit really should be increased (see the char buf definition in squid_ldap_group.c main() function). Also, the performance currently degrades linearly by the number of groups as the helper searches individually per group for a match in the directory. In theory it could aggregate the groups into a single large filter expression, but then there is LDAP servers who has limits on how large filter expressions may be.. Regards Henrik
