Thankyou Sumit. I think you might be trying to tel lme something with the debug_level=6 :-)On 4 July 2018 at 09:04, Sumit Bose <email@example.com> wrote:On Tue, Jul 03, 2018 at 02:12:22PM +0200, John Hearns wrote:
> I have an AD setup where users can be a member of perhaps 130 groups.
> When I run 'groups jbloggs' this can take 90 seconds or even longer.
> I have reduced that time to perhaps 20 seconds by setting
> ignore_group_members = TRUE
> Once the information is cached the groups command returns in less that one
> However, after a length of time the cache seems to be invalidated and the
> information is fetched again from the server, taking 20 seconds again.
> The cacheing parameters are set to:
> entry_cache_timeout = 5400
> entry_cache_user_timeout = 5400
> entry_cache_group_timeout = 5400
> refresh_expired_interval = 4000
> Surely this means that after 4000 seconds the user and group information is
> refreshed in the background.
> So a user running the groups command would always see freshly cached values?
With 'debug_level=6' or higher in the [domain/...] section of sssd.conf you
should be able to see messages like 'Refreshing <username> in domain
<domainname>' in domain log file when is refresh task is running.
> Clearly I am not understanding something here.
> sssd-users mailing list -- firstname.lastname@example.org.
> To unsubscribe send an email to email@example.com
> Fedora Code of Conduct: https://getfedora.org/code-of-
> List Guidelines: https://fedoraproject.org/wiki
> List Archives: https://lists.fedoraproject.or
g/archives/list/sssd-users@lis ts.fedorahosted.org/message/M4 R23YDHWUMUZPE4QZW2CFCYVU3WTXUO /
sssd-users mailing list -- firstname.lastname@example.org.
To unsubscribe send an email to email@example.com
Fedora Code of Conduct: https://getfedora.org/code-of-
List Guidelines: https://fedoraproject.org/wiki
List Archives: https://lists.fedoraproject.or
g/archives/list/sssd-users@lis ts.fedorahosted.org/message/GY L5YCE73YNOBPV6JNY2F5WVSBBRMCEC /