You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1925621
Description of problem:
The LDAP queries performed with scope=sub can be complex and overload the LDAP
server.
For example, SUDO rules LDAP queries performed with scope=sub over a large
basedn, could cause an unneeded load.
As a reference of the scope, the customer used:
https://ldapwiki.com/wiki/LDAP%20Search%20Scopes
As changing the sssd scope attribute of the LDAP queries would be disruptive
for the running sssd configurations, as the results would change, we would
suggest at least to document the fact that for best performance sssd should be
set with a smaller scope (eg scope=one).
The customer would recommend considering the switch to scope=one in RHEL9 (or
anyway starting with upstream).
Version-Release number of selected component (if applicable):
Any
How reproducible:
Check the documentation
Steps to Reproduce:
1.
2.
3.
Actual results:
The documentation does not report that scope=sub could introduce a performance
issue
Expected results:
The documentation must report that scope=sub could introduce a performance
issue
Additional info:
The text was updated successfully, but these errors were encountered:
Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1925621
The text was updated successfully, but these errors were encountered: