#635 Add generic support for ASQ/deref control in LDAP provider
Closed: Fixed None Opened 13 years ago by sbose.

If you have to look up a number of LDAP objects where only the DN is know, think of a DN list in a member attribute, there exist an efficient way to look them up in a single run. This is called 'dereference control' (http://tools.ietf.org/html/draft-masarati-ldap-deref-00) or 'Attribute Scoped Queries (ASQ)' (http://msdn.microsoft.com/en-us/library/aa366976%28VS.85%29.aspx). The problem is, that there is no real standard. OpenLDAP and 389ds use the deference control, Active Directory server ASQ. Other LDAP server may use different ways.

It would be nice if a generic API can be created for sssd, e.g. sdap_deref_send/_recv(), which hides all the details of the different implentations and can fall back to a series of base searches if no other way is available on the server side.

There are already two TODOs is sdap_async_accounts.c:

    /* TODO: test rootDSE for deref support and use it if available */
    /* TODO: or test rootDSE for ASQ support and use it if available */

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.6.0

Fields changed

coverity: =>
milestone: SSSD 1.6.0 => SSSD Deferred
upgrade: => 0

Fields changed

milestone: SSSD Deferred => NEEDS_TRIAGE
patch: => 0

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.6.0
priority: major => blocker

Fields changed

owner: somebody => jhrozek

Fields changed

patch: 0 => 1
status: new => assigned

Fixed in master:
d4bfba1

258d4b4

2cc60b6

0a4b058

4dbc76b

resolution: => fixed
status: assigned => closed

Metadata Update from @sbose:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.6.0

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1677

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata