diff options
author | Sumit Bose <sbose@redhat.com> | 2015-07-22 15:34:32 +0200 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-07-27 19:01:26 +0200 |
commit | da0eef19ac7b06ef84e29d0ee1506981eafda68e (patch) | |
tree | 63abe2a2c3e2aac3e181b25aea1f47766e345874 /server/polkit | |
parent | 2bffccf990b08fb8ce1c72a0a5092053c8a06e12 (diff) | |
download | sssd-review-negcache.tar.gz sssd-review-negcache.tar.xz sssd-review-negcache.zip |
nss: use negative cache for sid-by-id requestsreview-negcache
Since requests by ID are not assized to a specific domain SSSD might
check the ID in domains where the ID does not exists even if the ID is
already in the sysdb cache of the right domain. For requests where
already a memory cache is available like e.g. getpwuid() and getgrgid()
this has no negative impact because the requests are answered directly
from the cache most of the time without hitting SSSD. As long as there
is no use-case which does not use the memory cache those requests do not
need an update.
But for request like sid-by-id where currently no memory cache is
available there are quite some additional costs especially for trusted
domains.
Resolves https://fedorahosted.org/sssd/ticket/2731
Diffstat (limited to 'server/polkit')
0 files changed, 0 insertions, 0 deletions