Hi,
attached is patch for ticket
https://fedorahosted.org/sssd/ticket/3068
The ticket also talks about allowing options
for negative cache timeouts in all responders,
but I did not do that.
We do indeed initialize negative cache in all
responders, but we always read the timeouts
from NSS section. Also in the man pages, we only
document these options for NSS. So it is not
problem with the schema. I do agree that this is
not ideal, but should we fix it? I do not
think it is worth the time, but if someone thinks
otherwise, please open a ticket.
Michal