yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => juno-1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1230260

Title:
  Multiple round trips for DNs

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  Many LDAP objects are managed by DN  : user and group especially.
  However, converting the ID to the DN may require a search.  In those
  cases, the ID is recoreded, but the DN is not, and the serrach is
  executed multiple times.  This increases the load on the server and
  slows down results.

  Example can be seen here:

  https://github.com/openstack/keystone/blob/328d1673db7c0a88766b5190daa0f554f048cf15/keystone/identity/backends/ldap.py#L61

  get_user   will call



  if the config is set to search subtrees will call:

  https://github.com/openstack/keystone/blob/328d1673db7c0a88766b5190daa0f554f048cf15/keystone/common/ldap/core.py#L247

  and then it is a called again directly at

  https://github.com/openstack/keystone/blob/328d1673db7c0a88766b5190daa0f554f048cf15/keystone/identity/backends/ldap.py#L68

    self.user._id_to_dn(user_id),

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1230260/+subscriptions