This goes especially for ad groups that are bested in ipa_groups ie : microsft group is defined as an external group, and that external group is member of an ipa group and that ipa group takes forever.
Regards Rob Verduijn 2016-05-04 16:10 GMT+02:00 Rob Verduijn <rob.verdu...@gmail.com>: > Hello, > > I'm using a trust to microsoft active directory to allow users access > to linux servers. > > But when a user is added it takes a very long time for ipa to register this. > And even more time for the ipa clients since they have to wait for the > ipa servers. > > Since I hate to tell the users to wait for a couple hours, and also I > do not like to clean up the sssd cache folder each time a new user > appears. > > Is there a way to tell ipa and all clients to refresh their cache ? > > Regards > Rob Verduijn -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project