#3899 change the default service search base in SSSD-IPA
Closed: Fixed 4 years ago by jhrozek. Opened 5 years ago by jhrozek.

The search base for the ipService objects in the IPA provider is set to just cn=accounts,$BASE. But this can cause very expensive searches in case the sss_nss module is asked for a service objects, see more details in https://pagure.io/freeipa/issue/7797

That IPA ticket is suggesting to create a dummy empty container for services intended for future use. We should point the services search base there, too.


Metadata Update from @atikhonov:
- Issue assigned to atikhonov

5 years ago

Metadata Update from @jhrozek:
- Assignee reset

5 years ago

Metadata Update from @atikhonov:
- Issue assigned to atikhonov

5 years ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.2

5 years ago

Metadata Update from @atikhonov:
- Issue tagged with: PR

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4884

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata