[SSSD] NSS: disable midpoint refresh for netgroups if ptask refresh is enabled

Pavel Reichl preichl at redhat.com
Thu Feb 27 16:15:00 UTC 2014


On Thu, 2014-02-27 at 11:55 +0100, Pavel Březina wrote:
[snip]
> Nack.
> It is still possible having a netgroup expired if 
> refresh_expired_interval is misconfigured (> entry_cache_timeout). Thus 
> you still need to check if the netgroup is valid, maybe throw a visible 
> warning if it is expired and periodic refresh is enabled.
> 
[snip]

So how about checking that: 

   refresh_expired_intervat < entry_cache_timeout

when configuration is loaded? 

I thing these values are never changed although they are not const. 




More information about the sssd-devel mailing list