[sssd PR#253][opened] Use the ad_account_can_shortcut function in sssd server mode

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/253
Author: jhrozek
 Title: #253: Use the ad_account_can_shortcut function in sssd server mode
Action: opened

PR body:
"""
This is a performance enhancement for SSSD running on an IPA server with
IPA-AD trusts.

The code is hopefully simple as it mostly just moves code around. To
reproduce, you can run:
    getent passwd $id
or:
    getent group $id

Where $id is a UID or a GID of a user or a group coming from a trusted
domain that is further down the discovered domains list. Before the patch,
SSSD would search all domains. After the patch, SSSD should find out the
ID does not belong to that domain and immediatelly abort the request.
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/253/head:pr253
git checkout pr253

[sssd PR#253][comment] Use the ad_account_can_shortcut function in sssd server mode

[mzidek-rh]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

mzidek-rh commented:
"""
Without the patch the search by ID does ldap lookups for all domains one by one and decides that the returned entry is from different domain after the lookup was made. With the patch it only goes for the main IPA domain (which is fast, because we are in server mode) and the correct AD domain. Other AD domains are skipped.

LGTM (will ack when CI finishes - takes long time this time)

Michal
"""

See the full comment at https://github.com/SSSD/sssd/pull/253#issuecomment-298119558

[sssd PR#253][comment] Use the ad_account_can_shortcut function in sssd server mode

[mzidek-rh]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

mzidek-rh commented:
"""
ACK.
CI (the failure on RHEL6 is not related): http://sssd-ci.duckdns.org/logs/job/68/90/summary.html

Michal
"""

See the full comment at https://github.com/SSSD/sssd/pull/253#issuecomment-298601679

[sssd PR#253][+Accepted] Use the ad_account_can_shortcut function in sssd server mode

[fidencio]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

Label: +Accepted

[sssd PR#253][comment] Use the ad_account_can_shortcut function in sssd server mode

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

jhrozek commented:
"""
* master: dfe05f505dcfea16e7d66ca1a44206aa2570e861
"""

See the full comment at https://github.com/SSSD/sssd/pull/253#issuecomment-298661690

[sssd PR#253][closed] Use the ad_account_can_shortcut function in sssd server mode

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/253
Author: jhrozek
 Title: #253: Use the ad_account_can_shortcut function in sssd server mode
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/253/head:pr253
git checkout pr253

[sssd PR#253][-Accepted] Use the ad_account_can_shortcut function in sssd server mode

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

Label: -Accepted

[sssd PR#253][+Pushed] Use the ad_account_can_shortcut function in sssd server mode

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/253
Title: #253: Use the ad_account_can_shortcut function in sssd server mode

Label: +Pushed