Re: DBIS - new IETF drafts

Simo wrote:
> On Thu, 2014-01-09 at 21:36 +0100, Michael Ströder wrote:
>> Simo wrote:
>>> On Thu, 2014-01-09 at 16:48 +0100, Michael Ströder wrote:
>>>> Resolving nested group membership is a big performance cost. I can see this
>>>> with a MS Sharepoint installation working with a OpenLDAP server. Sharepoint
>>>> sends many search requests even though nested groups are not used in this
>>>> deployment.
>>>
>>> Performance issues with nested groups can easily be solved via caching
>>> and the deref control though.
>>
>> But the deref control gives you only one level. Speaking of nested groups in
>> general people mean more than just two-level group memberships.
> 
> It's an 80/20 thing, the most common case is 2 levels deep, so the worst
> case is not usually a big issue.

But if you don't enforce the 2-level-nested-groups limit the client has to
search for nested groups and deref control does not help.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ldapext