Is there any method to "filter" or mask some Active Directory groups in order to speed up the lookup/search in AD ? For example I am interested only on few groups (max. 10) and all the rules will be based on those groups. I do not want to display all hundreds of groups a user is member of, but only those 5-10 which are relevant for ipa rbac rules and which I can predefine upfront. The only reason I would like to do that is to speed up or reduce the lookup time in AD (it can take up to 10-15 seconds for users which are member of few hundred groups). I have tried most of the tunings recommended but I could not reduce it significantly.
freeipa-users@lists.fedorahosted.org