Request for enhancement

As an IPA administrator I want to limit the number of LDAP searches performed by the IPA framework.

Each IPA command is implemented standalone but some call others (e.g. host-del calls service-del) so there are some repeated executions (like is DNS available). By caching some answers the total number of LDAP searches can be reduced.

The cache does not need to be particularly aggressive. Only single entry searches will need to be cached so:

• get_entries/find_entries are excluded. Keeping track of all the options plus the cache data would be too cumbersome and probably not pay off.
• cn=kerberos cannot be cached because kadmin/kadmin.local may operate directly on the data
• the above is a risk with modifying data directly in LDAP too but is expected to be less
• the cache is per-request so the size should be relatively small and will refresh on its own. The only risk is a humongous batch command.