Is there any method to "filter" or mask some Active Directory groups in order to speed up the lookup/search in AD ? For example I am interested only on few groups (max. 10) and all the rules will be based on those groups. I do not want to display all hundreds of groups a user is member of, but only those 5-10 which are relevant for ipa rbac rules and which I can predefine upfront. The only reason I would like to do that is to speed up or reduce the lookup time in AD (it can take up to 10-15 seconds for users which are member of few hundred groups). I have tried most of the tunings recommended but I could not reduce it significantly. _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] AD trust - filter groups to speed up the Active Directory search
iulian roman via FreeIPA-users Tue, 04 May 2021 07:33:58 -0700
