Comments (3)
This is an interesting potential feature. I think that caching is key here, because there's no particular reason to suppose that C++ LDAP lookups will be much faster than Lua LDAP lookups. Both delay the Lua call enormously. What might be better is a pre-call to LDAP before Lua is called, and the results passed to Lua.
from weakforced.
BTW @sshipway are you aware of the ability to lookup arbitrary LDAP data from Dovecot and pass that information to weakforce? That may give you what you want, without the need to do LDAP lookups in weakforced.
See the example of "attrs/cos=%{userdb:cos}" in https://wiki.dovecot.org/Authentication/Policy
from weakforced.
Yes, I know about doing ldap retrievals per-user in Dovecot; however weakforced is wider than dovecot, and we also call it from AppSuite, Momentum and potentially other applications in the future; plus the use case I'm thinking about is where you might have per-domain limit options, which would be a separate LDAP lookup to the userdb. We have multiple customers who may wish to set per-domain thresholds over all of their mailbox domain at once.
As you said, the caching is the key (though having a native function would make the coding easier), including negative caching, to speed things up. Being able to set a positive and negative lookup cache time, plus cache size (and to extract stats on cache occupancy and hit rate for tuning) would be good.
from weakforced.
Related Issues (20)
- Support HTTPS in the REST API HOT 1
- Unexplained long delay on report() function call [BUG?] HOT 11
- TLS Client Authentication Configuration HOT 1
- parseTCPReplication error after restart of a SyncHost [BUG] HOT 9
- [BUG] linking fails with undefined symbol 'pthread_rwlock_unlock' HOT 12
- [BUG] GeoIP2 is not build without legacy GeoIP lib HOT 9
- [BUG] setACL() doesn't replaces current networks list HOT 11
- [BUG] wforce logs errors about failing to create folders ./uploads/tmp/XX HOT 2
- [BUG] SyncDone by sibling seems to fail sometimes HOT 14
- [FEATURE] expiring old SSDB keys HOT 1
- [BUG] incorrect HTTP response (404) on ACL fail in wforce 2.6.1 (should be 401) HOT 2
- [FEATURE] Weakforced missing ebuilds for gentoo HOT 4
- [FEATURE] add postfix check_policy_service support HOT 3
- [BUG] -ltermcap fails on gentoo HOT 4
- [BUG] wforce daemon stuck in 'warmup' state HOT 5
- [FEATURE] Official RPM for RHEL8 family built against Lua5.1, but should be built against Lua 5.3 HOT 3
- [FEATURE] Split regression so it runs jobs in parallel HOT 1
- [BUG] GEOIP2 not working in Docker image version 2.10 HOT 3
- [FEATURE] Change time to logging stats directive HOT 3
- [BUG] License conflicts HOT 10
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from weakforced.