- How to we prevent memory exhaustion and reasonable response time
( Nothing prevent an entry to be in millions of groups and handling valueset with
millions of values will be a nightmare )
This feature is being modelled off a feature from Active Directory - the same feature in
AD is "strongly discouraged from use" due to performance issues exactly as
Pierre is describing here.
So I do thing we should be careful and consider limits like this as well as performance as
a potential risk.
Senior Software Engineer,
Identity and Access Management
SUSE Labs, Australia