[Freeipa-devel] [PATCH 133] ipa-range-check: do not treat missing objects as error

[Sumit Bose]

On Wed, Feb 25, 2015 at 02:43:05PM +0100, Martin Kosek wrote:
> On 02/24/2015 06:47 PM, Sumit Bose wrote:
> > Hi,
> > 
> > this patch changes a return code and should fix
> > https://fedorahosted.org/freeipa/ticket/4924 .
> > 
> > bye,
> > Sumit
> 
> I have a related question. Do I read the plugin right, that whenever any object
> is changed, this plugins loads the whole entry and tests some of it's attribute
> to see if it is ID views and then does the actual check.
> 
> Is this good approach performance wise? Wouldn't it be better to decide even
> before that, based on DN and whether it is in the ID View Sub-Tree? CCing Thierry.

I assume you meant id-ranges instead of views, but yes, as long as we add
range objects only in a given sub-tree we can check the DN first.

bye,
Sumit

> 
> Martin