On Fri, Mar 30, 2012 at 01:23:10PM +0200, Pavel Březina wrote:
On 28.3.2012 17:33, Simo Sorce wrote:
>On Wed, 2012-03-28 at 10:09 -0400, Jakub Hrozek wrote:
>>On Tue, Mar 27, 2012 at 10:05:04AM +0200, Pavel Březina wrote:
>>>2. store the pair (user,domainname) in the in-memory cache as well
>>>- find domain name in in-memory cache
>>>- if not found then perform initgroups, go into provider, ...
>>>
>>>- find default options in in-memory cache
>>>- if not found then go into provider, ...
>>>
>>>Advantage - faster, easier to implement
>>>Disadvantage - bigger memory dump if the sudo is used by many users
>>>
>>>I hope that this is understandable enough.
>>>
>>
>>The cache places a timer on the cached data, so the memory is only
>>occupied for a short and defined period of time. I think the advantages
>>outweight the slightly bigger memory consumption, so I would prefer this
>>option.
>
>Why this data is not simply stored in LDB ?
>
>Simo.
>
I'm sorry, what data do you mean? The (user,domain) pair?
We talked with Simo recently about abandoning the memory cache completely
in favor of just performing LDB lookups(*) in order to avoid another cache
level. Sorry, I just didn't catch you online yesterday to explain. I'll
send you the IRC log in an e-mail.
(*) unless the performance regresses drastically