Re: [SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-19 Thread Jakub Hrozek
On Mon, Mar 19, 2012 at 07:26:22AM -0400, Stephen Gallagher wrote: > On Sun, 2012-03-18 at 21:31 +0100, Jakub Hrozek wrote: > > On Sun, Mar 18, 2012 at 12:54:35PM -0400, Dmitri Pal wrote: > > > Should we make it a default option? > > > It seems like in most cases it helps a lot. > > Not really in

Re: [SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-19 Thread Stephen Gallagher
On Sun, 2012-03-18 at 21:31 +0100, Jakub Hrozek wrote: > On Sun, Mar 18, 2012 at 12:54:35PM -0400, Dmitri Pal wrote: > > Should we make it a default option? > > It seems like in most cases it helps a lot. Not really in "most cases". It helps a lot in Active Directory environments because AD is pat

Re: [SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-18 Thread Jakub Hrozek
On Sun, Mar 18, 2012 at 12:54:35PM -0400, Dmitri Pal wrote: > Should we make it a default option? > It seems like in most cases it helps a lot. Changing the default might help performance but it might also cause the SSSD to not return valid data..and historically we've been preferring correct over

[SSSD] Fwd: [Bug 743133] Performance regression with Kerberos authentication against AD

2012-03-18 Thread Dmitri Pal
Should we make it a default option? It seems like in most cases it helps a lot. -- --- Comment #41 from Bojan Smojver 2012-03-18 00:50:01 EDT --- (In reply to comment #38) > One thing you might try is se