Subject: | LDAPImport should specify which attributes to return |
Date: | Wed, 28 May 2014 15:51:55 -0400 (EDT) |
To: | bug-RT-Extension-LDAPImport [...] rt.cpan.org |
From: | Andy Cobaugh <atc135 [...] psu.edu> |
rtldapimport should only request the attributes specified in $LDAPMapping
and $LDAPGroupMapping.
As it is, if we only need uid, mail, and cn from a user, we end up
returning the entire user object from LDAP, which depending on how some
directories are set up, could be rather large.
The same is true for groups. If an organization is using rfc2307bis style
groups that contain both memberUid and member attributes, and we only need
memberUid, we could potentially return a group object that is twice as big
as necessary. Consider the case where there is a group with hundreds or
thousands of members - that search result could be rather large.
This should be rather trivial to implement, by simply specifying attrs =>
[] in _run_search() and passing in the values of $LDAPMapping and
$LDAPGroupMapping where appropriate.
--
Andy Cobaugh
System Design Specialist
PSU/ITS/AIS/System Engineering