-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/25/2013 04:41 AM, Jakub Hrozek wrote:
> On Sun, Jun 23, 2013 at 09:12:01PM +0200, Jakub Hrozek wrote:
>> The attached patch applies on both master and sssd-1-9 and
>> fixes:
https://fedorahosted.org/sssd/ticket/1806
>>
>> The IPA provider attempted to store the original value of member
>> attribute to the cache. That caused the memberof plugin to
>> process the values which was really CPU intensive.
>>
>> We don't use the values anywhere and rely on the originalDN
>> instead, so it's safe to avoid even downloading them.
>>
>> Many thanks to Andreas and Simo for their help debugging the
>> problem.
>
> Attached is also a sssd-1-5 version of the patch.
>
>
Ack (by inspection).