Hi,
Are you looking for the following options? Refer to man sssd-ipa(5)
ipa_hbac_refresh (integer)
The amount of time between lookups of the HBAC rules
against the IPA server. This will reduce the latency and load on the
IPA server if there are many access-control requests made in a short
period.
Default: 5 (seconds)
ipa_hbac_selinux (integer)
The amount of time between lookups of the SELinux maps
against the IPA server. This will reduce the latency and load on the
IPA server if there are many user login requests made in a short
period.
Default: 5 (seconds)
On Fri, Jan 22, 2021 at 1:03 PM Judd Gaddie <judd(a)gaddie.net> wrote:
Hi, how can I change/configure the HBAC refresh timeout ?
Stephen Gallagher mentioned it here
https://pagure.io/SSSD/sssd/issue/1047
It appears that the default value may have changed from 1 minutes to 1 second in a newer
release.
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...