This goes especially for ad groups that are bested in ipa_groups

ie :
microsft group is defined as an external group,
and that external group is member of an ipa group
and that ipa group takes forever.

Rob Verduijn

2016-05-04 16:10 GMT+02:00 Rob Verduijn <>:
> Hello,
> I'm using a trust to microsoft active directory to allow users access
> to linux servers.
> But when a user is added it takes a very long time for ipa to register this.
> And even more time for the ipa clients since they have to wait for the
> ipa servers.
> Since I hate to tell the users to wait for a couple hours, and also I
> do not like to clean up the sssd cache folder each time a new user
> appears.
> Is there a way to tell ipa and all clients to refresh their cache ?
> Regards
> Rob Verduijn

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to