diff options
| author | Lukas Slebodnik <lslebodn@redhat.com> | 2013-05-14 18:00:10 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-08-09 15:04:43 +0200 |
| commit | 0b9e98122091c5bb6232ea4746decb6fbe2d68c0 (patch) | |
| tree | eba8755e80ab04a315a0385d4cea46fac079ebbe /src/providers/ldap/sdap.h | |
| parent | 6ed0eb3bf1b322a246aad6c3e02a7c3b4619d867 (diff) | |
| download | sssd-0b9e98122091c5bb6232ea4746decb6fbe2d68c0.tar.gz sssd-0b9e98122091c5bb6232ea4746decb6fbe2d68c0.tar.xz sssd-0b9e98122091c5bb6232ea4746decb6fbe2d68c0.zip | |
Adding option to disable retrieving large AD groups.sssd-1.9.2-113.el6
This commit adds new option ldap_disable_range_retrieval with default value
FALSE. If this option is enabled, large groups(>1500) will not be retrieved and
behaviour will be similar like was before commit ae8d047122c
"LDAP: Handle very large Active Directory groups"
https://fedorahosted.org/sssd/ticket/1823
Diffstat (limited to 'src/providers/ldap/sdap.h')
| -rw-r--r-- | src/providers/ldap/sdap.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/sdap.h b/src/providers/ldap/sdap.h index 5bbf27594..9cf83406b 100644 --- a/src/providers/ldap/sdap.h +++ b/src/providers/ldap/sdap.h @@ -229,6 +229,7 @@ enum sdap_basic_opt { SDAP_AD_MATCHING_RULE_GROUPS, SDAP_AD_MATCHING_RULE_INITGROUPS, SDAP_RFC2307_FALLBACK_TO_LOCAL_USERS, + SDAP_DISABLE_RANGE_RETRIEVAL, SDAP_OPTS_BASIC /* opts counter */ }; @@ -445,7 +446,8 @@ int sdap_get_map(TALLOC_CTX *memctx, int sdap_parse_entry(TALLOC_CTX *memctx, struct sdap_handle *sh, struct sdap_msg *sm, struct sdap_attr_map *map, int attrs_num, - struct sysdb_attrs **_attrs, char **_dn); + struct sysdb_attrs **_attrs, char **_dn, + bool disable_range_retrieval); int sdap_parse_user(TALLOC_CTX *memctx, struct sdap_options *opts, struct sdap_handle *sh, struct sdap_msg *sm, |