<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Pete Rowley wrote:
<blockquote cite="mid200506110257.j5B2vCdI020470@mx3.redhat.com"
type="cite">
<pre wrap="">I seem to have missed the start of this thread, so apologies for replying to
both posts here:
</pre>
<blockquote type="cite">
<pre wrap="">-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:fedora-directory-users-bounces@redhat.com">fedora-directory-users-bounces@redhat.com</a>
[<a class="moz-txt-link-freetext" href="mailto:fedora-directory-users-bounces@redhat.com">mailto:fedora-directory-users-bounces@redhat.com</a>] On Behalf
Of Richard Megginson
Sent: Friday, June 10, 2005 4:45 PM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Ideas for fds
<a class="moz-txt-link-abbreviated" href="mailto:jclowser@unitedmessaging.com">jclowser@unitedmessaging.com</a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Haven't really thought this through, but would it be
</pre>
</blockquote>
<pre wrap="">possible to use a
</pre>
<blockquote type="cite">
<pre wrap="">combination of roles and cos to create a group the way I am
suggesting? I would think even if possible, it would be
</pre>
</blockquote>
<pre wrap="">complicated
</pre>
<blockquote type="cite">
<pre wrap="">and probably pretty inefficient, but is an option. If I remember
correctly, you can't search on dynamic attributes generated by Cos,
though (actually, I think in the most recent version of the Sun DS,
you could search on them, but they are treated as unindexed
searches)... This would likely factory into the members
</pre>
</blockquote>
<pre wrap="">dynamically
</pre>
<blockquote type="cite">
<pre wrap="">returned as uniquemember idea as well, so one more inefficiency in
implementing my idea :-D
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->
This crops up every now and then and for the reasons given I (and others)
have fended it off. I am always weary of performance expectations with
feature requests and it is probably unlikely that an implimentation like
this would equal static group performance let alone roles performance. As
others have said, those potentially huge attribute value lists are a major
issue - just moving that data around on the server side is burdonsome.
Having said that, I did consider what would be required to do this. If you
required a two way relationship where the static groups could be updated old
style then you would need to make virtual attributes writeable - not a slam
dunk by any means. If you just wanted readable entries then that is
possible, but not the way you suggest. You would be far better off creating
a new virtual attribute service provider designed for the purpose than
retro-fitting the functionality into roles. It could key off the nsrole
attribute and/or interpret dynamic groups.
</pre>
<blockquote type="cite">
<pre wrap="">In Fedora DS these attributes are "indexed" so you can search
on them very quickly (e.g. ldapsearch .... (nsrole=ROLEDN)).
</pre>
</blockquote>
<pre wrap=""><!---->
When did indexing get added? :)
</pre>
</blockquote>
I just meant that searches using virtual attributes in search filters
are processed efficiently as if they had been indexed.<br>
<blockquote cite="mid200506110257.j5B2vCdI020470@mx3.redhat.com"
type="cite">
<pre wrap="">
--
Fedora-directory-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/fedora-directory-users">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a>
</pre>
</blockquote>
</body>
</html>