diff options
| author | Petr Vobornik <pvoborni@redhat.com> | 2015-03-31 10:59:37 +0200 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-04-27 05:55:04 +0000 |
| commit | 4364ac08c538e3a4253804f523707092b34c2ed2 (patch) | |
| tree | 4340e638bf293fe20bf2e680ad050aef97a7edc9 /ipapython | |
| parent | 4a5f5b14c3159e3517b2bfefc3e89f16cebe9d4b (diff) | |
| download | freeipa-4364ac08c538e3a4253804f523707092b34c2ed2.tar.gz freeipa-4364ac08c538e3a4253804f523707092b34c2ed2.tar.xz freeipa-4364ac08c538e3a4253804f523707092b34c2ed2.zip | |
speed up indirect member processing
the old implementation tried to get all entries which are member of group.
That means also user. User can't have any members therefore this costly
processing was unnecessary.
New implementation reduces the search only to entries which have members.
Also page size was removed to avoid paging by small pages(default size: 100)
which is very slow for many members.
https://fedorahosted.org/freeipa/ticket/4947
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipapython')
| -rw-r--r-- | ipapython/ipaldap.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py index 7cda7d67d..75ff2177b 100644 --- a/ipapython/ipaldap.py +++ b/ipapython/ipaldap.py @@ -665,6 +665,8 @@ class LDAPClient(object): _SYNTAX_OVERRIDE = CIDict({ 'managedtemplate': DN, 'managedbase': DN, + 'memberindirect': DN, + 'memberofindirect':DN, 'originscope': DN, 'idnsname': DNSName, 'idnssoamname': DNSName, |