freeipa

#8801 user-mod requires two searches for a user entry
Closed: fixed by frenaud. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

The user-mod plugin follows the standard formula: calculate the dn and check existence using get_dn (in this case get_either dn). Only the dn attribute is retrieved.

In a user-mod that does not tweak objectclass another search is done to retrieve the objectclass attribute for the pre_common_callback which adds necessary objectclasses as needed (the typical case).

We can save a search by requesting and returning the objectclasses in get_either_dn().

https://github.com/freeipa/freeipa/pull/5707

master:

  • bf1f66c0c15ceeb65671df495cf66018522ae3cc Retrieve the user objectclasses when checking for existence

ipa-4-9:

  • 58c73a71ba296380e10ffc28a2c360ef8341d53d Retrieve the user objectclasses when checking for existence

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

performance

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.