[PATCH] pdb_ldap: Use lp_ldap_group_suffix

[Volker Lendecke]

On Mon, Jul 09, 2012 at 11:20:00PM +0200, Michael Adam wrote:
> Well, this is essentially the revert of
> 91a8cb851e1919a337310e2c699d8fcf76a55060:
> 
> "Fix bug #6431 - local groups from 3.0 setups no longer found."
> (Search for groups without group suffix, group suffix is only
> used for new entries.)
> 
> https://bugzilla.samba.org/show_bug.cgi?id=6431
> 
> So we can't simply revert that if we still want to
> support older installations.
> 
> We could force the use of some form of "upgrade-provision" for
> older installations.

Well, for pdb_ldap there is no way for an upgrade-provision.
We do not control the user's LDAP trees the same way S4
controls the AD tree.

Christof, what is your exact performance problem? As Andrew
pointed out, it should be possible to configure the LDAP
tree so that this is not a problem.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de