Ronald Wimmer via FreeIPA-users wrote: > On 10.04.25 00:15, Ronald Wimmer via FreeIPA-users wrote: >> On 09.04.25 23:22, Larkin, Patrick wrote: >> > Are you using Automount? >> No. >> > Also, do you have lots of groups? >> No. >> > And are these identities part of an AD trust or completely internal >> to IPA/IDM? >> IPA only. >> >> I am aware of problems coming from large AD user bases. But we are >> talking about around 20 IPA-only users here. And maybe 25 groups. > > Can this be related to the fact that an AD trust exists from the IPA > domain?
I don't know enough about how SSSD does its backend but you might want to try sssctl analyze (https://sssd.io/troubleshooting/analyzer.html) It can tell you where time is being spent, including if it is waiting for group info from AD. rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
