diff options
| author | Lukas Slebodnik <lslebodn@redhat.com> | 2013-05-14 18:00:10 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-05-23 11:52:21 +0200 |
| commit | c13eb9379fbe9958a4f810ba14171a3d5335d62e (patch) | |
| tree | 812253b5bae16635799d883e0fbed27acb1545ec /src/providers/ipa | |
| parent | 200d054efd449435e2bc9d8f7a00fee2183d9c75 (diff) | |
| download | sssd-c13eb9379fbe9958a4f810ba14171a3d5335d62e.tar.gz sssd-c13eb9379fbe9958a4f810ba14171a3d5335d62e.tar.xz sssd-c13eb9379fbe9958a4f810ba14171a3d5335d62e.zip | |
Adding option to disable retrieving large AD groups.
This commit adds new option ldap_disable_range_retrieval with default value
FALSE. If this option is enabled, large groups(>1500) will not be retrieved and
behaviour will be similar like was before commit ae8d047122c
"LDAP: Handle very large Active Directory groups"
https://fedorahosted.org/sssd/ticket/1823
Diffstat (limited to 'src/providers/ipa')
| -rw-r--r-- | src/providers/ipa/ipa_opts.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_opts.h b/src/providers/ipa/ipa_opts.h index ff461db19..ff161689e 100644 --- a/src/providers/ipa/ipa_opts.h +++ b/src/providers/ipa/ipa_opts.h @@ -135,6 +135,7 @@ struct dp_option ipa_def_ldap_opts[] = { { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_rfc2307_fallback_to_local_users", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, + { "ldap_disable_range_retrieval", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, DP_OPTION_TERMINATOR }; |