From owner-freebsd-current@FreeBSD.ORG Tue Dec 6 16:28:52 2005 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4ECF716A41F for ; Tue, 6 Dec 2005 16:28:52 +0000 (GMT) (envelope-from Hartmut.Brandt@dlr.de) Received: from smtp-1.dlr.de (smtp-1.dlr.de [195.37.61.185]) by mx1.FreeBSD.org (Postfix) with ESMTP id A3C0B43D75 for ; Tue, 6 Dec 2005 16:28:51 +0000 (GMT) (envelope-from Hartmut.Brandt@dlr.de) Received: from beagle.kn.op.dlr.de ([129.247.173.6]) by smtp-1.dlr.de over TLS secured channel with Microsoft SMTPSVC(6.0.3790.211); Tue, 6 Dec 2005 17:28:49 +0100 Date: Tue, 6 Dec 2005 17:28:49 +0100 (CET) From: Harti Brandt X-X-Sender: brandt_h@beagle.kn.op.dlr.de To: Michael Bushkov In-Reply-To: <4395A24D.9050001@rsu.ru> Message-ID: <20051206172638.F16797@beagle.kn.op.dlr.de> References: <43957D3F.4070109@rsu.ru> <20051206125936.E16797@beagle.kn.op.dlr.de> <4395A24D.9050001@rsu.ru> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-1250000812-1133886529=:16797" X-OriginalArrivalTime: 06 Dec 2005 16:28:49.0500 (UTC) FILETIME=[234F01C0:01C5FA82] Cc: freebsd-current@freebsd.org Subject: Re: [PATCH] nsswitch extensions + caching X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Harti Brandt List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Dec 2005 16:28:52 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --0-1250000812-1133886529=:16797 Content-Type: TEXT/PLAIN; charset=koi8-r Content-Transfer-Encoding: QUOTED-PRINTABLE On Tue, 6 Dec 2005, Michael Bushkov wrote: MB>Hi Harti! MB>I think, that there is a chance. We can make an nsswitch source, named MB>"compat". This source will keep the "traditional" functionality, i.e. wo= uld MB>be implemented through getgrent(), setgrent(). The "compat" source can a= lso MB>be used as a stub in all places, where we don't want to write the new, MB>specialized code, but want our usual functionality (getgrent+setgrent). MB>We then can modify the winbind nsswitch module to support the getgroupli= st() MB>function, so that it can work in the optimal way. The winbind part should be easy, because one can copy this more or less=20 from the linux winbind module. MB>So I don't see any reason, that won't allow us to do it. MB> MB>I can implement all the necessary stuff, If you don't mind. This would be really, really great because it makes FreeBSD in an AD=20 environment a little more usable. =F3=D0=C1=D3=C9=C2=CF, harti MB> MB>With best regards, MB>Michael MB> MB>Harti Brandt wrote: MB> MB>> Hi Michael, MB>>=20 MB>> just a short question: is there any chance you could marshall the MB>> getgrouplist() call through nsswitch? Linux does this and FreeBSD does= n't. MB>> The problem with not doing this comes when you connect a FreeBSD machi= ne MB>> via Samba to a large Active Directory. The current implementation of MB>> getgrouplist() scans through all groups. This may take several minutes MB>> depending on the size of the AD. On Linux this is much faster, because MB>> Samba's implementation of getgrouplist() can directly ask the AD for a= list MB>> of all members of a given group. MB>>=20 MB>> I would try to do this myself, but given my lack of knowledge in the MB>> nsswitch stuff and the lack of free time this would take some time. MB>>=20 MB>> Thanks, MB>> harti MB>>=20 MB>> On Tue, 6 Dec 2005, Michael Bushkov wrote: MB>>=20 MB>> MB>Hello! MB>> MB>I've made the "nsswitch + caching daemon" project during the Google= 's MB>> Summer MB>> MB>of Code. I'm still working on it - there is always a room for MB>> improvements :) MB>> MB> MB>> MB>Since previous release, I've made a lot of changes to the initial MB>> version, MB>> MB>fixed some bugs, and this version seems to be worth using it :) MB>> MB> MB>> MB>Here is the the new release of the patch: MB>> MB>http://www.rsu.ru/~bushman/nsswitch_cached/nss_cached_rev2.patch MB>> MB> MB>> MB>The description of the project itself and of its several new featur= es MB>> can be MB>> MB>found here: MB>> MB>http://rsu.ru/~bushman/nsswitch_cached/ MB>> MB> MB>> MB>Your feedback would be great! MB>> MB> MB>> MB>Michael Bushkov MB>> MB>Rostov State University MB>> MB>_______________________________________________ MB>> MB>freebsd-current@freebsd.org mailing list MB>> MB>http://lists.freebsd.org/mailman/listinfo/freebsd-current MB>> MB>To unsubscribe, send any mail to MB>> "freebsd-current-unsubscribe@freebsd.org" MB>> MB> MB>> MB> MB>> MB> MB>> =20 MB> MB> MB> --0-1250000812-1133886529=:16797--