[Freeipa-devel] [PATCH] Add group plugin port to new LDAP backend.

[Jason Gerard DeRose]

On Fri, 2009-05-15 at 10:15 -0400, Simo Sorce wrote:
> On Fri, 2009-05-15 at 03:57 +0000, Jason Gerard DeRose wrote:
> > 
> > So there's my two cents.  Now the question is, did I convenience
> > you?  ;)
> 
> I am not sure you "convenience" me but you may have convinced me.

Hehe, how is it that the Italian is always the one who catches my bad
English usage/spelling mistakes?  Actually, you and Steve both gang up
on me.  ;)

> I understand the technical issues better now, although I would rather
> see if that's really 50x or not, and how much that would influence the
> overall performance.

I'll setup a test.  My 50x is just a wild guess, but I'd be very
surprised if it was any less than 10x slower.

Like I said, even if there was no performance impact, the compatibility
issue alone is reason enough not to use CIDict, IHMO.

> We can settle for always casefolding, but how much of an impact is it to
> always lower case all attribute names on each query ?

This will have little impact because we only do it once when the dict
enters the pipeline.

The pipeline does rounds and rounds of dict gymnastics (hehe)... we do
set operations on dicts, they are copied, merged, we do a zillion
membership tests, iterate through keys and values again and again, etc.
So having slowdown in these numerous operations in the middle of the
pipeline will have a much larger effect than slowdown in a single
operation at an entry point.

> Simo.
>