Re: [SSSD] [PATCH] [RFC] refactor nested group processing

[Pavel Březina]

Happy weekend everyone,
if you are bored you can look at this code.

I believe noderef path is fully completed. I haven't tried it so far,
it will not even compile - hopefully only because there are no function
prototypes. Those task are next on my schedule.

There is one logical change that may need explaining. In the current
code, every group from member attribute is always pulled from LDAP. But
it is not further processed nor stored in hash table (and therefore in
sysdb) if we have reached the maximum nesting level.

Now, if we know ahead that the dn is a group and we have reached the
maximum nesting level, we skip the group without contacting LDAP. That
brings a little change in condition level > max_level to level >=
max_level, because we do the check before increasing the nesting level.

Otherwise everything should be well explained from the code or
comments. If not, than I have apparently failed the job.