From f602ad270d06a0dd7f53c4aa6904d27daa07d4ae Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Wed, 23 May 2012 12:35:44 -0400 Subject: Add support for disabling KDC writes Add two global ipaConfig options to disable undesirable writes that have performance impact. The "KDC:Disable Last Success" will disable writing back to ldap the last successful AS Request time (successful kinit) The "KDC:Disable Lockout" will disable completely writing back lockout related data. This means lockout policies will stop working. https://fedorahosted.org/freeipa/ticket/2734 --- daemons/ipa-kdb/ipa_kdb.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'daemons/ipa-kdb/ipa_kdb.h') diff --git a/daemons/ipa-kdb/ipa_kdb.h b/daemons/ipa-kdb/ipa_kdb.h index 996d8448b..c1cc7a7d8 100644 --- a/daemons/ipa-kdb/ipa_kdb.h +++ b/daemons/ipa-kdb/ipa_kdb.h @@ -92,6 +92,8 @@ struct ipadb_context { krb5_key_salt_tuple *supp_encs; int n_supp_encs; struct ipadb_wincompat wc; + bool disable_last_success; + bool disable_lockout; }; #define IPA_E_DATA_MAGIC 0x0eda7a -- cgit