summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-06-23 17:39:50 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-06-27 16:56:36 +0200
commite526ea590b031e3257511b02a887a0379602578c (patch)
treef11b5efc56ad606fc9cb94aa43441c60344de1db
parentaf380de3553b78af34655ca1b05f9816e8c3fe21 (diff)
downloadsssd-e526ea590b031e3257511b02a887a0379602578c.tar.gz
sssd-e526ea590b031e3257511b02a887a0379602578c.tar.xz
sssd-e526ea590b031e3257511b02a887a0379602578c.zip
IPA: Do not download or store the member attribute of host groups
https://fedorahosted.org/sssd/ticket/1806 The IPA provider attempted to store the original value of member attribute to the cache. That caused the memberof plugin to process the values which was really CPU intensive.
-rw-r--r--src/providers/ipa/ipa_hbac_hosts.c9
1 files changed, 4 insertions, 5 deletions
diff --git a/src/providers/ipa/ipa_hbac_hosts.c b/src/providers/ipa/ipa_hbac_hosts.c
index 667cf9066..1fd5aa2f1 100644
--- a/src/providers/ipa/ipa_hbac_hosts.c
+++ b/src/providers/ipa/ipa_hbac_hosts.c
@@ -106,7 +106,7 @@ ipa_hbac_host_info_send(TALLOC_CTX *mem_ctx,
goto immediate;
}
- state->attrs = talloc_array(state, const char *, 8);
+ state->attrs = talloc_array(state, const char *, 7);
if (state->attrs == NULL) {
DEBUG(1, ("Failed to allocate host attribute list.\n"));
ret = ENOMEM;
@@ -116,10 +116,9 @@ ipa_hbac_host_info_send(TALLOC_CTX *mem_ctx,
state->attrs[1] = IPA_HOST_SERVERHOSTNAME;
state->attrs[2] = IPA_HOST_FQDN;
state->attrs[3] = IPA_UNIQUE_ID;
- state->attrs[4] = IPA_MEMBER;
- state->attrs[5] = IPA_MEMBEROF;
- state->attrs[6] = IPA_CN;
- state->attrs[7] = NULL;
+ state->attrs[4] = IPA_MEMBEROF;
+ state->attrs[5] = IPA_CN;
+ state->attrs[6] = NULL;
subreq = sdap_get_generic_send(state, ev, opts, sh, search_base,
LDAP_SCOPE_SUB, host_filter,