[SSSD] a few questions about sssd

Jakub Hrozek jhrozek at redhat.com
Mon Nov 2 09:57:54 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/02/2009 05:44 AM, David O'Brien wrote:
> Greetings one and all. I have a couple of questions about sssd, from 
> various places.
> 
> 1. "How long should nss_sss cache negative cache hits before asking the 
> back end again?" (from NSS config options in the sssd.conf man page)
> 
> I don't quite get how you query the cache for something and cache the 
> results, unless there are two caches.
> 

This is probably my poor wording..what I meant to say was just "how long
is negative cache valid", IOW how long SSSD will just return that the
entry is negative before asking providers.

> 2. Are the cache and other option's values specified in seconds? I've 
> seen values of 15, 120, and 600, but I'm green enough with this sort of 
> thing to ask to make sure.
> 

AFACT, enum_cache_timeout, entry_cache_nowait_timeout,
entry_negative_timeout are all in seconds, they are compared against
now=time(NULL) which returns seconds since The Epoch.

offline_credentials_expiration is in days (as the manpage states)

Hope this helps,
	Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkrurSIACgkQHsardTLnvCWlRACgj85b5RHqrm8+HU+1xoYjmb3Y
oM8AoIBedu6rz61rh5TE2LUvEXteJS/4
=hGrn
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list