Bug#478950: desktop-profiles: Very slow with large LDAP database and NSS LDAP

2008-05-03 Thread Petter Reinholdtsen
[Arthur de Jong] No, the command: Ah, there has been some improvements. getgrouplist() seem to be the API function used (ran ltrace id username). Did not know about this function. It definitely resolves my complaints about the missing POSIX API. Great, thank you! Happy hacking, -- Petter

Bug#478950: desktop-profiles: Very slow with large LDAP database and NSS LDAP

2008-05-02 Thread Petter Reinholdtsen
[Arthur de Jong] Note that id -Gn without parameters can return different results than id -Gn with a user parameter. On my system I use pam_group to assign extra groups to users who login through gdm: Yes. We use the same in Debian Edu. Not quite sure why the desktop-profile code appear to

Bug#478950: desktop-profiles: Very slow with large LDAP database and NSS LDAP

2008-05-02 Thread Arthur de Jong
On Fri, 2008-05-02 at 11:08 +0200, Petter Reinholdtsen wrote: Actually, initgroups is only called when the user log in, and then the result is cached by the kernel, so id and groups fetches it from the kernel using getgroups() and does not extract it again by calling initgroups(), when looking

Bug#478950: desktop-profiles: Very slow with large LDAP database and NSS LDAP

2008-05-02 Thread cobaco (aka Bart Cornelis)
tags 478950 pending patch is applied in svn On Friday 02 May 2008, Petter Reinholdtsen wrote: Note that id -Gn without parameters can return different results than id -Gn with a user parameter. On my system I use pam_group to assign extra groups to users who login through gdm: Yes. We