28 Nov
2016
28 Nov
'16
7:21 p.m.
On (28/11/16 19:07), docbook.xml@gmail.com wrote:
sssd has the following config to set the interval for the sudo rules refresh:
ldap_sudo_full_refresh_interval
What is the configuration to set the interval for the netgroup definition retrieval from LDAP?
netgroups are not refreshed by default.
They are retutned from sssd cache if entry is valid. This time is confugurable with the option entry_cache_netgroup_timeout which has by defualt the same alue as the option entry_cache_timeout (5400)
May I know why do you need to periodically refresh netgroups from LDAP?
LS