> "The trickiest piece of this functionality would be
ensuring that we
> don't delete existing member/memberOf linkages from the cache during
> group lookups that were put there by previous initgroups() requests.
> Thus, when this option is in play, member/memberOf should only be
> managed by initgroups() calls."
I think I've tweaked the code such that this is true, proposed patch
attached. Review would be good :), I'm not completely sure I understood
the request flow, so while my initial testing seemed to indicate this
was working correctly there could be edge cases that aren't handled
right.
Thanks...