#3755 The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers

Created 11 days ago by jhrozek
Modified 3 days ago

When sssd tries to check whether POSIX attributes have been replicated to the global catalog, it currently tries to look for "(|(uidNumber=)(gidNumber=))" with sizelimit=1. This doesn't work well, because AD would fill a full page of results anyway and then only return one entry.

Instead, we should either just look at the Partial Replication set or look for some known ID in the filter.

11 days ago

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1582975

3 days ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.16.3

Login to comment on this ticket.

https://bugzilla.redhat.com/show_bug.cgi?id=1582975

cancel