From 4364ac08c538e3a4253804f523707092b34c2ed2 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Tue, 31 Mar 2015 10:59:37 +0200 Subject: speed up indirect member processing the old implementation tried to get all entries which are member of group. That means also user. User can't have any members therefore this costly processing was unnecessary. New implementation reduces the search only to entries which have members. Also page size was removed to avoid paging by small pages(default size: 100) which is very slow for many members. https://fedorahosted.org/freeipa/ticket/4947 Reviewed-By: Jan Cholasta --- ipapython/ipaldap.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'ipapython/ipaldap.py') diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py index 7cda7d67d..75ff2177b 100644 --- a/ipapython/ipaldap.py +++ b/ipapython/ipaldap.py @@ -665,6 +665,8 @@ class LDAPClient(object): _SYNTAX_OVERRIDE = CIDict({ 'managedtemplate': DN, 'managedbase': DN, + 'memberindirect': DN, + 'memberofindirect':DN, 'originscope': DN, 'idnsname': DNSName, 'idnssoamname': DNSName, -- cgit