Re: [PATCH] nsswitch extensions + caching

From: Harti Brandt <hartmut.brandt_at_dlr.de>
Date: Tue, 6 Dec 2005 17:28:49 +0100 (CET)
On Tue, 6 Dec 2005, Michael Bushkov wrote:

MB>Hi Harti!
MB>I think, that there is a chance. We can make an nsswitch source, named
MB>"compat". This source will keep the "traditional" functionality, i.e. would
MB>be implemented through getgrent(), setgrent(). The "compat" source can also
MB>be used as a stub in all places, where we don't want to write the new,
MB>specialized code, but want our usual functionality (getgrent+setgrent).
MB>We then can modify the winbind nsswitch module to support the getgrouplist()
MB>function, so that it can work in the optimal way.

The winbind part should be easy, because one can copy this more or less 
from the linux winbind module.

MB>So I don't see any reason, that won't allow us to do it.
MB>
MB>I can implement all the necessary stuff, If you don't mind.

This would be really, really great because it makes FreeBSD in an AD 
environment a little more usable.

σΠΑΣΙΒΟ,
harti

MB>
MB>With best regards,
MB>Michael
MB>
MB>Harti Brandt wrote:
MB>
MB>> Hi Michael,
MB>> 
MB>> just a short question: is there any chance you could marshall the
MB>> getgrouplist() call through nsswitch? Linux does this and FreeBSD doesn't.
MB>> The problem with not doing this comes when you connect a FreeBSD machine
MB>> via Samba to a large Active Directory. The current implementation of
MB>> getgrouplist() scans through all groups. This may take several minutes
MB>> depending on the size of the AD. On Linux this is much faster, because
MB>> Samba's implementation of getgrouplist() can directly ask the AD for a list
MB>> of all members of a given group.
MB>> 
MB>> I would try to do this myself, but given my lack of knowledge in the
MB>> nsswitch stuff and the lack of free time this would take some time.
MB>> 
MB>> Thanks,
MB>> harti
MB>> 
MB>> On Tue, 6 Dec 2005, Michael Bushkov wrote:
MB>> 
MB>> MB>Hello!
MB>> MB>I've made the "nsswitch + caching daemon" project during the Google's
MB>> Summer
MB>> MB>of Code. I'm still working on it - there is always a room for
MB>> improvements :)
MB>> MB>
MB>> MB>Since previous release, I've made a lot of changes to the initial
MB>> version,
MB>> MB>fixed some bugs, and this version seems to be worth using it :)
MB>> MB>
MB>> MB>Here is the the new release of the patch:
MB>> MB>http://www.rsu.ru/~bushman/nsswitch_cached/nss_cached_rev2.patch
MB>> MB>
MB>> MB>The description of the project itself and of its several new features
MB>> can be
MB>> MB>found here:
MB>> MB>http://rsu.ru/~bushman/nsswitch_cached/
MB>> MB>
MB>> MB>Your feedback would be great!
MB>> MB>
MB>> MB>Michael Bushkov
MB>> MB>Rostov State University
MB>> MB>_______________________________________________
MB>> MB>freebsd-current_at_freebsd.org mailing list
MB>> MB>http://lists.freebsd.org/mailman/listinfo/freebsd-current
MB>> MB>To unsubscribe, send any mail to
MB>> "freebsd-current-unsubscribe_at_freebsd.org"
MB>> MB>
MB>> MB>
MB>> MB>
MB>>  
MB>
MB>
MB>
Received on Tue Dec 06 2005 - 15:28:52 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:48 UTC