[SSSD-users] sssd troubles under load

Jakub Hrozek jhrozek at redhat.com
Thu Jan 8 18:54:06 UTC 2015


On Thu, Jan 08, 2015 at 11:46:55AM -0700, Orion Poplawski wrote:
> On 01/08/2015 10:18 AM, Lukas Slebodnik wrote:
> > On (08/01/15 09:31), Orion Poplawski wrote:
> >> contracts-grants is not in LDAP.
> > You can filter request for non-LDAP users/groups in nss section of sssd.conf
> > 
> > man sssd.conf -> filter_users, filter_groups
> 
> Thanks, but I'm wondering why that user is even attempted to be looked up in
> the first place - it's an email aliases.

Is the domain part of the e-mail address same as the sssd domain name
perchance?

> 
> I'm also seeing requests for the "postfix" user in sss, which is interesting
> since it is in /etc/passwd, /etc/group.  Perhaps looking up supplementary
> group info?

yes, initgroups(3) always cycles through all databases.

This is a prime candidate for adding into filter_users -- I filter out
pulse-rt and root on my laptop.


More information about the sssd-users mailing list