386b419e76dd05dc70e9d3317d62172d6673046f
When recursively expanding LDAP groups we used to fetch all attributes for each group. In our corporate setup this has been causing a huge amount of data being transfered from the LDAP server to our Gerrit instances. In the tcpdump output I could find a list of all corporate user accounts being returned (probably as an attribute of a group). However, we are really only interested in one attribute. Therefore, ask the LDAP server for this one attribute only. This reduces the amount of transfered data by a factor of 40, in our corporate setup. Change-Id: I74df9064771d174a02f0e4d7cb2c5a994b9d8333
Description
RETIRED, Gerrit as used by OpenStack