[SSSD] Recommended settings.

Jakub Hrozek jhrozek at redhat.com
Fri Aug 6 09:30:39 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/06/2010 11:18 AM, Patrik Martinsson wrote:
> So basically, what I'm wondering is, cant i have getent passwd returning 
> all my users without having enumerate = true in the config ?

No, if you run "getent passwd" (without any specific user) you are doing
an enumeration and for that to work, you need to have the "enumerate"
parameter set to "true". As a side note, if you'd like to enumerate only
users served via SSSD, you can run "getent passwd -s sss" (asking only
for users from the nss_sss module).

Enumeration is not advised in large directories, but please note that
only the first enumeration would be slow as SSSD needs to pull the users
from the server. After that, if would return the entries from cache.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxb1j8ACgkQHsardTLnvCXpQQCePCJSITrhp8oXVDIAxKU/O/nd
jl8Ani1WSjSzborNyk30Yx2uN6uQGKBE
=BfCS
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list