On 12/04/2014 04:05 PM, PATRICK wrote:
> Sorry for the blind email, but we are hitting a wall. We
currently use
> ODSEE LDAP for OS auth services. With the migration to sssd we are
> noticing that connection time takes an unacceptable amount of time. We
> have done some debugging and notice that SSSD pulls all of the users
> POSIX object class attributes from LDAP. We use host attributes to
> granularly regulated who can log in where. With some users having 10K
> host attributes, it takes a while for sssd to import and cache all
> that information. If there anyway to stop SSSD from caching all the
> users info? Maybe just the uid, passwd and shadow?
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users What is the setting for
the enumerate configuration option in sssd.conf?
Is it set to true?
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.