freeipa/daemons
Jason Woods d6a7923f71 ipa-sam: cache gid to sid and uid to sid requests in idmap cache
Add idmap_cache calls to ipa-sam to prevent huge numbers of LDAP calls to the
directory service for gid/uid<->sid resolution.

Additionally, this patch further reduces number of queries by:
 - fast fail on uidNumber=0 which doesn't exist in FreeIPA,
 - return fallback group correctly when looking up user primary group as is
   done during init,
 - checking for group objectclass in case insensitive way

Patch by Jason Woods <devel@jasonwoods.me.uk>

Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>

https://fedorahosted.org/freeipa/ticket/4234
and
https://bugzilla.redhat.com/show_bug.cgi?id=1073829
https://bugzilla.redhat.com/show_bug.cgi?id=1074314

Reviewed-By: Sumit Bose <sbose@redhat.com>
2014-03-12 12:19:06 +01:00
..
ipa-kdb Avoid passing non-terminated string to is_master_host 2014-03-11 16:55:01 +01:00
ipa-otpd Move ipa-otpd socket directory 2014-02-11 17:36:19 +01:00
ipa-sam ipa-sam: cache gid to sid and uid to sid requests in idmap cache 2014-03-12 12:19:06 +01:00
ipa-slapi-plugins libotp: do not call internal search for NULL dn 2014-02-21 10:27:34 +01:00
configure.ac Add OTP last token plugin 2014-02-21 10:26:02 +01:00
ipa-version.h.in Fix typos 2011-09-07 13:20:42 +02:00
Makefile.am Add the krb5/FreeIPA RADIUS companion daemon 2013-05-17 09:30:51 +02:00