Group caching issue
by vivianne@chinstrap.org
Hello,
I'm using SSSD with LDAP and NSS enabled for user/group information. Originally, groups besides the primary group would be "forgotten"/no longer be present. Invalidating the cache with sss_cache -u (username) temporarily fixes it, and through testing I found it'd reoccur 5 minutes after forced cache invalidation. I realized NIS was mistakenly in our nsswitch.conf and removed it, and now it seems to happen about every 45 minutes consistently. If you leave the machine for a while and come back then they'll be present again. I've set debug_log=10 under all our conf sections but don't really see anything relevant in the logs watching them with tail while checking group presence. I'm not experienced with SSSD administration, so I'd appreciate any tips on triaging this further. Thanks all.
Vivianne