sssd.git/src/providers/ldap/sdap_range.h, branch nonroot-libcap sssd with jhrozek's patches Adding option to disable retrieving large AD groups. 2013-05-23T09:45:38+00:00 Lukas Slebodnik lslebodn@redhat.com 2013-05-14T16:00:10+00:00 6263578b03a52b3ec3a2e33e097554241780fc20 This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823 
This commit adds new option ldap_disable_range_retrieval with default value
FALSE. If this option is enabled, large groups(>1500) will not be retrieved and
behaviour will be similar like was before commit ae8d047122c
"LDAP: Handle very large Active Directory groups"

https://fedorahosted.org/sssd/ticket/1823
LDAP: Handle very large Active Directory groups 2012-05-10T15:34:46+00:00 Stephen Gallagher sgallagh@redhat.com 2012-05-08T12:47:33+00:00 ae8d047122c7ba8123f72b2eac68944868ac37d4 Active Directory 2008R2 allows only 1500 group members to be retrieved in a single lookup. However, when we hit such a situation, we can take advantage of the ASQ lookups, which are not similarly limited. With this patch, we will add any members found by ASQ that were not found by the initial lookup so we will end with a complete group listing. https://fedorahosted.org/sssd/ticket/783 
Active Directory 2008R2 allows only 1500 group members to be
retrieved in a single lookup. However, when we hit such a
situation, we can take advantage of the ASQ lookups, which are not
similarly limited.

With this patch, we will add any members found by ASQ that were
not found by the initial lookup so we will end with a complete
group listing.

https://fedorahosted.org/sssd/ticket/783