[SSSD] NSS: disable midpoint refresh for netgroups if ptask refresh is enabled
Pavel Reichl
preichl at redhat.com
Thu Feb 27 16:15:00 UTC 2014
On Thu, 2014-02-27 at 11:55 +0100, Pavel Březina wrote:
[snip]
> Nack.
> It is still possible having a netgroup expired if
> refresh_expired_interval is misconfigured (> entry_cache_timeout). Thus
> you still need to check if the netgroup is valid, maybe throw a visible
> warning if it is expired and periodic refresh is enabled.
>
[snip]
So how about checking that:
refresh_expired_intervat < entry_cache_timeout
when configuration is loaded?
I thing these values are never changed although they are not const.
More information about the sssd-devel
mailing list