Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Dec 2005 17:28:49 +0100 (CET)
From:      Harti Brandt <hartmut.brandt@dlr.de>
To:        Michael Bushkov <bushman@rsu.ru>
Cc:        freebsd-current@freebsd.org
Subject:   Re: [PATCH] nsswitch extensions + caching
Message-ID:  <20051206172638.F16797@beagle.kn.op.dlr.de>
In-Reply-To: <4395A24D.9050001@rsu.ru>
References:  <43957D3F.4070109@rsu.ru> <20051206125936.E16797@beagle.kn.op.dlr.de> <4395A24D.9050001@rsu.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--0-1250000812-1133886529=:16797
Content-Type: TEXT/PLAIN; charset=koi8-r
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Tue, 6 Dec 2005, Michael Bushkov wrote:

MB>Hi Harti!
MB>I think, that there is a chance. We can make an nsswitch source, named
MB>"compat". This source will keep the "traditional" functionality, i.e. wo=
uld
MB>be implemented through getgrent(), setgrent(). The "compat" source can a=
lso
MB>be used as a stub in all places, where we don't want to write the new,
MB>specialized code, but want our usual functionality (getgrent+setgrent).
MB>We then can modify the winbind nsswitch module to support the getgroupli=
st()
MB>function, so that it can work in the optimal way.

The winbind part should be easy, because one can copy this more or less=20
from the linux winbind module.

MB>So I don't see any reason, that won't allow us to do it.
MB>
MB>I can implement all the necessary stuff, If you don't mind.

This would be really, really great because it makes FreeBSD in an AD=20
environment a little more usable.

=F3=D0=C1=D3=C9=C2=CF,
harti

MB>
MB>With best regards,
MB>Michael
MB>
MB>Harti Brandt wrote:
MB>
MB>> Hi Michael,
MB>>=20
MB>> just a short question: is there any chance you could marshall the
MB>> getgrouplist() call through nsswitch? Linux does this and FreeBSD does=
n't.
MB>> The problem with not doing this comes when you connect a FreeBSD machi=
ne
MB>> via Samba to a large Active Directory. The current implementation of
MB>> getgrouplist() scans through all groups. This may take several minutes
MB>> depending on the size of the AD. On Linux this is much faster, because
MB>> Samba's implementation of getgrouplist() can directly ask the AD for a=
 list
MB>> of all members of a given group.
MB>>=20
MB>> I would try to do this myself, but given my lack of knowledge in the
MB>> nsswitch stuff and the lack of free time this would take some time.
MB>>=20
MB>> Thanks,
MB>> harti
MB>>=20
MB>> On Tue, 6 Dec 2005, Michael Bushkov wrote:
MB>>=20
MB>> MB>Hello!
MB>> MB>I've made the "nsswitch + caching daemon" project during the Google=
's
MB>> Summer
MB>> MB>of Code. I'm still working on it - there is always a room for
MB>> improvements :)
MB>> MB>
MB>> MB>Since previous release, I've made a lot of changes to the initial
MB>> version,
MB>> MB>fixed some bugs, and this version seems to be worth using it :)
MB>> MB>
MB>> MB>Here is the the new release of the patch:
MB>> MB>http://www.rsu.ru/~bushman/nsswitch_cached/nss_cached_rev2.patch
MB>> MB>
MB>> MB>The description of the project itself and of its several new featur=
es
MB>> can be
MB>> MB>found here:
MB>> MB>http://rsu.ru/~bushman/nsswitch_cached/
MB>> MB>
MB>> MB>Your feedback would be great!
MB>> MB>
MB>> MB>Michael Bushkov
MB>> MB>Rostov State University
MB>> MB>_______________________________________________
MB>> MB>freebsd-current@freebsd.org mailing list
MB>> MB>http://lists.freebsd.org/mailman/listinfo/freebsd-current
MB>> MB>To unsubscribe, send any mail to
MB>> "freebsd-current-unsubscribe@freebsd.org"
MB>> MB>
MB>> MB>
MB>> MB>
MB>> =20
MB>
MB>
MB>
--0-1250000812-1133886529=:16797--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051206172638.F16797>