[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: PATCH: cache_groupacl {on|off}

If you would like your patch considered for inclusion in
OpenLDAP Software, please submit it to the project using
the Issue Tracking System (http://www.openldap.org/its/).


At 09:14 PM 10/18/2003, Diego Rivera wrote:
>This patch is applicable to OpenLDAP 2.1.22, but it MAY be applicable to
>the current snapshots.
>It allows turning on/off the caching of Group ACL evaluations, to force
>group ACL evaluation every time.  In my particular setup, the side
>effect from the caching that the ACL would be "frozen" at its initial
>evaluation and never refreshed posed a problem.
>The performance hit was acceptable, in exchange for the added security
>consistency.  YMMV, and use only when 100% necessary according to your
>particular setups.
>So I came up with this config option to allow startup-time selection of
>behavior.  The default is "on" , to match the same behavior as if the
>patch were not present.
>* Diego Rivera                                            *
>*                                                         *
>* "The Disease: Windows, the cure: Linux"                 *
>*                                                         *
>* E-mail: lrivera<AT>racsa<DOT>co<DOT>cr                  *
>* Replace: <AT>='@', <DOT>='.'                            *
>*                                                         *
>* GPG: BE59 5469 C696 C80D FF5C  5926 0B36 F8FF DA98 62AD *
>* GPG Public Key avaliable at: http://pgp.mit.edu         *