mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
dfd56dd294
Logs showed that every SAM authentication was causing a non-indexed ldb search for member=XXX. This was previously indexed in Samba4, but since we switched to using the indexes from the full AD schema it now isn't. The fix is to use the extended DN operations to allow us to ask the server for the memberOf attribute instead, with with the SIDs attached to the result. This also means one less search on every authentication. The patch is made more complex by the fact that some common routines use the result of these user searches, so we had to update all searches that uses user_attrs and those common routines to make sure they all returned a ldb_message with a memberOf filled in and the SIDs attached. |
||
|---|---|---|
| .. | ||
| credentials | ||
| gensec | ||
| kerberos | ||
| ntlm | ||
| ntlmssp | ||
| tests | ||
| auth_sam_reply.c | ||
| auth.h | ||
| config.m4 | ||
| config.mk | ||
| pyauth.c | ||
| pyauth.h | ||
| sam.c | ||
| samba_server_gensec.c | ||
| session.c | ||
| session.h | ||
| system_session.c | ||