All,

We’re tracking down login and sudo slowness in RHEL7 when using sssd/AD as a backend.  30 – 45 seconds (or more) of slowness.

Only in RHEL7 – not in RHEL6 or RHEL8.

We worked with our vendor – we’re pretty sure we’re got it.  It’s due to this RHEL7 bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1532105

But along the way, in our research we encountered this sage bit of advice:

https://superuser.com/questions/1343631/sssd-nss-slow-when-using-sudo

In simple terms “local providers before remote providers”.  Thus “systemd” before “sss”. 

Does this recommendation still stand?

So if still in force, is this /etc/nsswitch.conf setting recommended?

                passwd:  systemd files sss

                group:  systemd files sss

Or is this better:

passwd: files systemd sss

                group:  files systemd sss

Or does it not matter?

Spike