Make LDAP code fetch less attributes from LDAP server when KDC is asking
Johan Gadsjö did a awesome analysis of the LDAP access pattens and sent us a patch that reduced the calls the ldap server by 4 times as many. The patch was adopted and change to avoid compile time depencies and make the determination runtime instead. Thanks!
This commit is contained in:
@@ -361,7 +361,7 @@ send_complete (krb5_context context, slave *s,
|
||||
return ret;
|
||||
}
|
||||
|
||||
ret = hdb_foreach (context, db, 0, prop_one, s);
|
||||
ret = hdb_foreach (context, db, HDB_F_ADMIN_DATA, prop_one, s);
|
||||
if (ret) {
|
||||
krb5_warn (context, ret, "hdb_foreach");
|
||||
slave_dead(context, s);
|
||||
|
Reference in New Issue
Block a user