Hi all, I was hoping you could help me with this, as I am essentially clueless by this
point.Even setting debug logging to 8 does not give much information as to what the
problem might be.
I have chosen to set the enum_cache_timeout to a high value, e.g. 26000 seconds. This
because we have a very large environment in terms of AD groups (we use Kerberos over LDAP)
and this takes a long time to retrieve all groups. Weird part is, although this helped on
some clients, it does not actually reduce login/sudo times on others. I have set the
following values in sssd.conf:
entry_cache_nowait_percentage = 50
entry_cache_timeout = 60
My reason for this is that defining a value for the nowait percentage automatically
update entries in the background. Not sure if I set the percentage rights though.
https://linux.die.net/man/5/sssd.conf
What is wise to do in this regard? My desired behavior would be that it returns entries
from cache even while offline as often as possible, and updates the cache in the
background. I don't want users to have to wait for SSSD to iterate through all our
insane amounts of groups in the foreground.
Thanks in advance!