Hey,


We're looking into why our servers are suddenly less performant with authentications than they used to be.  We have SSSD set up to allow users to login with their email address.  However, the email addresses are from various domains.  It appears that sssd still attempts to break apart the address and refer to the @user.domain.  Is there a way to prevent sssd from attempting to lookup the user for a domain it doesn't manage?  I've looked through the man pages and had hoped that setting "subdomain_provider = none" would help but it appears not to be the case.  We're still looking through the logs.  Based on how ldap/ad would normally handle this id (user@example.com), it's typically expected behavior but it'd be nice to override this if possible and just defer to the sssd domain.


I hope that made sense.


thanks


=G=