Hi,

I just want to check wether the performance of sssd is alright or if there is room for improvement.

I am using a binding account to query the Active Directory.
I've configured a nesting level of 1.

When I login the first time or run the id command it takes around 5 secs to finish when the user is member of ~100 (nested) groups in the AD.
It takes around 10 secs if the user is member of ~200 (nested) groups.

So you can say the loading time is increasing linearly to the membership of groups.

Unfortunately I need to use a nesting level of 1. I've set group members to false and enumeration off.

Are these values in an acceptable area? What experiences did you make?

Thank you :)

JM