freeipa

#3264 [RFE] Supporting SID compression for extra SIDs
Opened by simo. Modified

Open
Close Issue

We currently store the IPA domain SIDs in the extraSIDs part of the PAC.
This part includes full SID for each identifier.
We should probably investigate putting these SIDs into the ResourceGroupIds instead (One full domain SID + N 32bit RIDs) which is more compact.
More reasearch into further SID compression is Needed.
Sid Compression is mentioned in MS-KILE

Metadata Update from @simo:
- Issue assigned to someone
- Issue set to the milestone: Future Releases
Metadata
None
None
None
Normal
enhancement
Trusts
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.