Hi,
I guess because I was lazy when writing the original patch the cached
entries for users and groups from trusted domains on IPA clients had a
hardcoded lifetime of 10h. With this patch the configurable timeouts as
described in the sssd.conf man page should be respected which should fix
https://fedorahosted.org/sssd/ticket/2899.
bye,
Sumit
From 651ed633f87ad5134d9006a4ef93932628f222ca Mon Sep 17 00:00:00
2001
From: Sumit Bose <sbose(a)redhat.com>
Date: Tue, 5 Jan 2016 13:46:55 +0100
Subject: [PATCH] ipa_s2n_save_objects(): use configured user and group timeout
Resolves
https://fedorahosted.org/sssd/ticket/2899
---
src/providers/ipa/ipa_s2n_exop.c | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c
index bcd11749fbde4cae2a47b9b2182138ae04f2d6bc..d101a437dfaf2829013f9e3e3705a7161c654d78
100644
--- a/src/providers/ipa/ipa_s2n_exop.c
+++ b/src/providers/ipa/ipa_s2n_exop.c
@@ -1743,7 +1743,6 @@ static errno_t ipa_s2n_save_objects(struct sss_domain_info *dom,
{
int ret;
time_t now;
- uint64_t timeout = 10*60*60; /* FIXME: find a better timeout ! */