On Tue, Jun 13, 2017 at 12:34:41PM +0000, Joakim Tjernlund wrote:
> timeout = 30 in domain section SEEMS to help, no problem since
yesterday.
> What did I really do here?
>
However, now I see that getent group/getent group <a-grp-name> is incomplete,
members are missing.
And it varies between machines, even ones that have enumerate = false has incomplete
member list for
a random grop name.
Bug-whack-a-mole probably:
https://pagure.io/SSSD/sssd/issue/3369
please check the debug logs if there are messages from the "cleanup
task".