Thats very interesting. Have you seen noticeable improvement using outbound vs nscd from performance ? 


On Wed, Jun 11, 2014 at 8:50 PM, Simo Sorce <> wrote:
On Wed, 2014-06-11 at 13:29 -0400, Dmitri Pal wrote:
> On 06/11/2014 08:06 AM, Daniel Jung wrote:
> > Thanks! And totally agree with nscd being a crap
> SSSD provides fast caching of users and groups similar to nscd.
> For other maps you have to decide what tool is best. Nscd is an option
> but we really want to hear about the reason why it is needed.
> dnsmasq is a preferred solution for hosts.

Actually in Fedora we are proposing to install unbound by default as
caching name server because it can do DNSSEC properly.

So in general we favor a proper DNS caching daemon over nscd.


Simo Sorce * Red Hat, Inc * New York

sssd-users mailing list