[PATCH] nsswitch extensions + caching

Harti Brandt hartmut.brandt at dlr.de
Tue Dec 6 08:28:52 PST 2005

On Tue, 6 Dec 2005, Michael Bushkov wrote:

MB>Hi Harti!
MB>I think, that there is a chance. We can make an nsswitch source, named
MB>"compat". This source will keep the "traditional" functionality, i.e. would
MB>be implemented through getgrent(), setgrent(). The "compat" source can also
MB>be used as a stub in all places, where we don't want to write the new,
MB>specialized code, but want our usual functionality (getgrent+setgrent).
MB>We then can modify the winbind nsswitch module to support the getgrouplist()
MB>function, so that it can work in the optimal way.

The winbind part should be easy, because one can copy this more or less 
from the linux winbind module.

MB>So I don't see any reason, that won't allow us to do it.
MB>I can implement all the necessary stuff, If you don't mind.

This would be really, really great because it makes FreeBSD in an AD 
environment a little more usable.


MB>With best regards,
MB>Harti Brandt wrote:
MB>> Hi Michael,
MB>> just a short question: is there any chance you could marshall the
MB>> getgrouplist() call through nsswitch? Linux does this and FreeBSD doesn't.
MB>> The problem with not doing this comes when you connect a FreeBSD machine
MB>> via Samba to a large Active Directory. The current implementation of
MB>> getgrouplist() scans through all groups. This may take several minutes
MB>> depending on the size of the AD. On Linux this is much faster, because
MB>> Samba's implementation of getgrouplist() can directly ask the AD for a list
MB>> of all members of a given group.
MB>> I would try to do this myself, but given my lack of knowledge in the
MB>> nsswitch stuff and the lack of free time this would take some time.
MB>> Thanks,
MB>> harti
MB>> On Tue, 6 Dec 2005, Michael Bushkov wrote:
MB>> MB>Hello!
MB>> MB>I've made the "nsswitch + caching daemon" project during the Google's
MB>> Summer
MB>> MB>of Code. I'm still working on it - there is always a room for
MB>> improvements :)
MB>> MB>
MB>> MB>Since previous release, I've made a lot of changes to the initial
MB>> version,
MB>> MB>fixed some bugs, and this version seems to be worth using it :)
MB>> MB>
MB>> MB>Here is the the new release of the patch:
MB>> MB>http://www.rsu.ru/~bushman/nsswitch_cached/nss_cached_rev2.patch
MB>> MB>
MB>> MB>The description of the project itself and of its several new features
MB>> can be
MB>> MB>found here:
MB>> MB>http://rsu.ru/~bushman/nsswitch_cached/
MB>> MB>
MB>> MB>Your feedback would be great!
MB>> MB>
MB>> MB>Michael Bushkov
MB>> MB>Rostov State University
MB>> MB>_______________________________________________
MB>> MB>freebsd-current at freebsd.org mailing list
MB>> MB>http://lists.freebsd.org/mailman/listinfo/freebsd-current
MB>> MB>To unsubscribe, send any mail to
MB>> "freebsd-current-unsubscribe at freebsd.org"
MB>> MB>
MB>> MB>
MB>> MB>

More information about the freebsd-current mailing list