From 2021fe3e69527d25fb1b2dc67e4e931e6a56260a Mon Sep 17 00:00:00 2001
From: neil_a_wilson <neil_a_wilson@localhost>
Date: Fri, 13 Apr 2007 15:59:03 +0000
Subject: [PATCH] Update the member virtual attribute implementation so that it provides a mechanism for preventing the entire member list from being returned, which can be a very expensive operation.  When running with this configuration, the attribute will handle requests that determine whether a given user is a member of the group, but will not list the entire set of membership.

---
 opends/resource/config/config.ldif |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/opends/resource/config/config.ldif b/opends/resource/config/config.ldif
index 9752405..9b6458b 100644
--- a/opends/resource/config/config.ldif
+++ b/opends/resource/config/config.ldif
@@ -1741,22 +1741,26 @@
 dn: cn=Virtual Static member,cn=Virtual Attributes,cn=config
 objectClass: top
 objectClass: ds-cfg-virtual-attribute
+objectClass: ds-cfg-member-virtual-attribute
 cn: Virtual Static member
 ds-cfg-virtual-attribute-class: org.opends.server.extensions.MemberVirtualAttributeProvider
 ds-cfg-virtual-attribute-enabled: true
 ds-cfg-virtual-attribute-type: member
 ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
 ds-cfg-virtual-attribute-filter: (&(objectClass=groupOfNames)(objectClass=ds-virtual-static-group))
+ds-cfg-allow-retrieving-membership: false
 
 dn: cn=Virtual Static uniqueMember,cn=Virtual Attributes,cn=config
 objectClass: top
 objectClass: ds-cfg-virtual-attribute
+objectClass: ds-cfg-member-virtual-attribute
 cn: Virtual Static uniqueMember
 ds-cfg-virtual-attribute-class: org.opends.server.extensions.MemberVirtualAttributeProvider
 ds-cfg-virtual-attribute-enabled: true
 ds-cfg-virtual-attribute-type: uniqueMember
 ds-cfg-virtual-attribute-conflict-behavior: virtual-overrides-real
 ds-cfg-virtual-attribute-filter: (&(objectClass=groupOfUniqueNames)(objectClass=ds-virtual-static-group))
+ds-cfg-allow-retrieving-membership: false
 
 dn: cn=Work Queue,cn=config
 objectClass: top

--
Gitblit v1.10.0