#3755 The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers

Created 2 months ago by jhrozek
Modified a month ago

When sssd tries to check whether POSIX attributes have been replicated to the global catalog, it currently tries to look for "(|(uidNumber=)(gidNumber=))" with sizelimit=1. This doesn't work well, because AD would fill a full page of results anyway and then only return one entry.

Instead, we should either just look at the Partial Replication set or look for some known ID in the filter.

2 months ago

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1582975

2 months ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.16.3

2 months ago

Metadata Update from @jhrozek:
- Issue assigned to jhrozek

2 months ago

Metadata Update from @jhrozek:
- Issue tagged with: PR, performance

a month ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Login to comment on this ticket.

https://bugzilla.redhat.com/show_bug.cgi?id=1582975

cancel