On 10.12.21 09:50, Florence Blanc-Renaud wrote:
Hi,
You can have a look at
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/....
The diagram shows the "memcache" and "LDB cache".
I hope I'm not mixing both but I believe the "memcache" corresponds to
/var/lib/sss/mc/* while "LDB cache" to /var/lib/sss/db/. The commands
sss_cache and sssctl cache-expire *invalidate* the records in the cache,
which I understand as "mark them as if they were expired", not as "delete
them". From sss_cache man page: "Invalidated records are forced to be
reloaded from server as soon as related SSSD backend is online."
Thanks for the clarification. This makes sense.
Currently, we have /var/lib/sss/db in RAM to gain a little performance:
#Performancetuning for SSSD/IPA
tmpfs /var/lib/sss/db/ tmpfs size=1024M,mode=0700
Wouldn't it make sense to put /var/lib/sss/mc in RAM too?
Cheers,
Ronald