David Han created KNOX-3533:
-------------------------------
Summary: LDAP Proxy skips expensive member lookup if memberOf
attribute not requested
Key: KNOX-3533
URL: https://issues.apache.org/jira/browse/KNOX-3533
Project: Apache Knox
Issue Type: Improvement
Components: Server
Affects Versions: 3.1.0
Reporter: David Han
Assignee: David Han
Fix For: 3.1.0
Group membership lookup in the LdapProxyBackend is an expensive operation
because it submits multiple search requests to the backend to calculate group
memberships if the backend doesn't support memberOf or to calculate transitive
group memberships. This is unnecessary if the search request does not include
the memberOf attribute. In that case, skip the expensive calculation.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
