sids2xids in winbind
Volker.Lendecke at SerNet.DE
Fri Mar 25 10:29:26 MDT 2011
Simo told me that when he changed the idmap subsystem I
oppsed to the idea of a sids2gids operation. I was wrong,
sorry for that. It is needed in particular in the cluster
case where a user being member of hundreds of groups logs in
for the first time with none of the groups in idmap yet.
Transactions in the cluster case are pretty slow, so
allocating all gids individually can make that login even
contains the code that optimizes this operation by
coalescing all the allocations into one tdb-level
transaction. It's quite a bit more complicated than it first
sounds, because sid2gid needs a lookupsid first. So the
patchset implements a proper, optimized, wb_lookupsids
operation in winbind also available via the winbind pipe.
To be optimized (as little roundtrips and transactions as
sanely possible), this patchset has to fiddle with arrays a
lot. That's why I'm asking for review here. Watch out, this
is pretty tricky code.
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
More information about the samba-technical