> On 19 Mar 2015, at 19:34, Paul B. Henson <[email protected]> wrote: > >> From: Jakub Hrozek >> Sent: Thursday, March 19, 2015 2:10 AM >> >> OK, so the autofs client module already calls getautomntbyname as >> appropriate and if we switched sssd to only read the requested key on >> receiving getautomntbyname, you wouldn't need to do any changes to >> SSSD? > > There are three components in play here; the generic autofs code, the autofs > sss lookup module, and sssd. The generic autofs code is definitely good to > go, as it works fine with the autofs ldap lookup module. I took a quick look > at the autofs sss lookup module, and I think that does not need any changes. > As far as I can tell, it already passes the separate setmntent, getmntent, > and getmntbyname calls to the sssd backend, so the change under discussion > should be transparent to it. So it looks like Ian is off the hook on this > one ;), thanks though for looking at it with us. > >> Paul, can you file the SSSD bug either way? > > Done: > > https://fedorahosted.org/sssd/ticket/2607 > > I also opened Red Hat support case 1386246 referencing the ticket and > requesting a fix/backport to RHEL6.
Thank you, I added a comment to speed up the process. > > It doesn't seem like this change should be very difficult, basically rather > than reading the entire map on the setmntent call, it should only note the > map name. Then for getmntbyname calls it can do individual lookups, and only > pull over the entire map if getmntent is called. That's basically the same > as is already done for users and groups. I might take a look at it myself, > but given my lack of familiarity with the sssd code it would probably take > me a lot longer than one of you guys to pound it out :). I think we need to split the existing request which loads both the keys and the maps into two and let the current Data Provider handler only call the request that reads the map. Then create another DP handler or modify the existing one to allow calling the second part of the original request separately. On the responder part, we need to link the setmntent call with the new DP request. Not too hard, just a bit of coding :-) _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
