Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use negative cache better and domain checks for lookup by SIDs #6353

Closed
wants to merge 2 commits into from

Conversation

thalman
Copy link
Contributor

@thalman thalman commented Sep 20, 2022

Better use of negative cache and get_domain check mechanism for SID lookup.

The first part implements function to add non existing SID to negative
cache for an individual domains. Second part implements multi-domain search interface
for SID lookup.

Resolves: #6352

src/responder/common/negcache.c Outdated Show resolved Hide resolved
src/responder/common/responder.h Show resolved Hide resolved
@thalman
Copy link
Contributor Author

thalman commented Sep 29, 2022

@aplopez - thank you for the review. I updated the PR according your comments and extended tests for negative cache.

T.

Copy link
Contributor

@aplopez aplopez left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks.

This patch implements function to add non existing SID to negative
cache for individual domains.

Resolves: SSSD#6352
@alexey-tikhonov alexey-tikhonov self-assigned this Oct 3, 2022
@alexey-tikhonov
Copy link
Member

alexey-tikhonov commented Oct 3, 2022

Hi,

imo, commit message of a 2nd patch is a bit misleading:

Multi-domain search interface implementation for SID lookup.

I mean, this is implementation of mechanism to /skip/ multi-domain search, right?

This patch adds handlers for the dp_get_domain_check_fn(),
dp_get_domain_send_fn() and dp_get_domain_recv_fn() functions
to requests that resolve objects by SID.

The patch also extends the AD provider so it can handle those
domain-by-sid lookups.

This patch also adds domain-local negcache set/check methods
for SID lookups.

Resolves: SSSD#6352
@thalman
Copy link
Contributor Author

thalman commented Oct 4, 2022

Hi @alexey-tikhonov

I updated the code of sid != NULL check and I rewrite the commit message to be more detailed and precise. WDYT?

T.

Copy link
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

thanks for the updates, ACK.

bye,
Sumit

@alexey-tikhonov
Copy link
Member

Hi @alexey-tikhonov

I updated the code of sid != NULL check and I rewrite the commit message to be more detailed and precise. WDYT?

T.

Thank you for the updates. ACK.

@pbrezina
Copy link
Member

pbrezina commented Oct 5, 2022

Pushed PR: #6353

  • master
    • 5ea1ed2 - CACHE: implement get_domain for SID lookup
    • 70d5460 - CACHE: implement ncache_add_fn for ncache SID

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Use negative cache better and domain checks for lookup by SIDs
5 participants