I'm fairly certain that the order in nsswitch orders the data cached by sssd. So files first for fastest locate then sss last for local cache then actual lookup over the wire. It's a first-find process.
So both are correct. Files first AND sssd caches all of it in the order from nsswitch. On Tue, Feb 4, 2025, 3:45 PM Spike White via sssd-users < [email protected]> wrote: > All, > > In the comments in /etc/nsswitch.conf file, it says: > > # Notes: > # > # 'sssd' performs its own 'files'-based caching, so it should generally > # come before 'files'. > # > > > and then later: > > # In order of likelihood of use to accelerate lookup. > passwd: sss files systemd > shadow: files > group: sss files systemd > > > However, we have consulted with Redhat Tech Support years ago when we > first started implementing sssd and they advised us to put in local > providers first, then remote. > > So we typically do this: > > passwd: files systemd sss > ... > group: files systemd sss > > > Which is correct? > > Spike > -- > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
