Hi,

I will work on $subject [1] and I have discussed this topic with Jakub a week ago. There are some open questions, so I will be glad if you say your opinion.

There could be heavy traffic between SSSD client and server coused by local users. We need longer timeout in negative cache for local users.

Questions are:

a) Is better hack negative_cache or responder?

b) Is better set timeout = 0 (it means permanently in negative cache) or set something really big like 12 hours? * We couldn't remove local users from permanent negative cache (only by restart).
* Is timeout = 12 hours means some kind of network peak?

c) Is it enough to do it only for initgroups?

Regards

--
Petr^4 Čech

--
[1] https://fedorahosted.org/sssd/ticket/2928
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org

Reply via email to