#3842 Download overrides periodically, not on every request
Opened 20 days ago by jhrozek. Modified 4 days ago

At the moment, pretty much every back end request towards an IPA server includes checking if the requested filter value (e.g. name, ID) is an override or if it can be looked up directly.

This can be quite expensive, especially if multiple domains are involved. Consider looking up an ID - for N domains, the current code looks up N times if it's an override in the same override container and then it can even shortcut the request if the ID doesn't map to a SID from the current domain.

It would help performance quite a bit if SSSD fetched the overrides periodically and evaluated the overrides from the cache only.


Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.1

4 days ago

Login to comment on this ticket.

Metadata