On Thu, Dec 17, 2020 at 10:58:32AM +0100, Thomas HUMMEL wrote:
On 16/12/2020 17:47, Sumit Bose wrote:
> On Tue, Dec 15, 2020 at 02:53:28PM +0100, Thomas HUMMEL wrote:
> the reason for the difference is that 'id' without a username [...]
Hello,
thanks for your answer.It's very clear.
However I still cannot figure out where, in the case of 'id <username>`, the
5 *min* delay I see comes from.
In sssd.conf I configured entry_cache_user_timeout = 5 (*sec*) so the
timeout must correspond to another setting but I don't see which one.
Hi,
this is indeed related to the different caches of SSSD. The
entry_cache_*_timeout options determine the lifetimes of the object in
the on-disk cache in /var/lib/sss/db/. But to speed up common lookups
SSSD uses a memory mapped cache as well which is directly accessed by
SSSD's nss plugin so that the client does not has to talk to SSSD but
can read the needed data from memory directly.For the cache there is the
option 'memcache_timeout' which has a default of 300s (aka 5 min).
Please note that we are using different options here on purpose because
the memory cache is primarily used by the glibc nss interface while the
on-disk cache is used in other way as well. So it might be useful to be
able to configure the timeouts independently.
HTH
bye,
Sumit
Thanks for your help
--
Thomas HUMMEL
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...