[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#5114) pcache cache results for searches that hit size/timelimit



rhafer@suse.de wrote:

> But a malicous client can then just send requests with sizelimit 1. Those 
> query will get cached and the database is of no real use anymore (IMO).

Well, in this case, the proxycache should either change the sizelimit
(and the timelimit) to unlimited, and deal with client-requested limits
locally, or consider uncacheable those requests that specify a time or a
size limit.  On the contrary, they should be considered answerable if a
corresponding request is cached, and the limits should be checked locally.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Email:   pierangelo.masarati@sys-net.it
---------------------------------------