Re: selinux prohibiting sssd usage

[John Hodrien <J.H.Hodrien@xxxxxxxxxxx>]

On Thu, 11 Aug 2011, Michael Gliwinski wrote:

> On Wednesday 10 Aug 2011 18:59:14 Paul Heinlein wrote:
>> Oddly, when using sssd+ldap, getent without a specific key won't
>> return ldap account information, but with a key it will. That is,
>> "getent passwd" will return only accounts in the local /etc/passwd
>> database, but "getent passwd bob" will return ldap-supplied
>> information about user bo
>
> That is normal unless you have 'enumerate = true' for the LDAP domain in SSSD
> config file.  Note that SSSD manual warns that this may be slow for large
> installations (personally I haven't had a problem with it yet but only have <
> 200 posix users).

I can confirm that With tens of thousands it's cripplingly slow.

jh
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos