Re: [Freeipa-users] SSSD Cache and Service Tickets

2017-05-16 Thread Ronald Wimmer
On 2017-05-15 21:27, Jakub Hrozek wrote: [...] On Mon, May 15, 2017 at 03:54:22PM +0200, Ronald Wimmer wrote: Hi, I am confronted with a behaviour for which I do not have an explanation for. I am using NFS4 Kerberos automounted homeshares and and recently I got a permission denied

Re: [Freeipa-users] SSSD Cache and Service Tickets

2017-05-15 Thread Jakub Hrozek
First, I'm sorry if this mail is not helpful enough, I'm really just replying to the part I'm familiar with On Mon, May 15, 2017 at 03:54:22PM +0200, Ronald Wimmer wrote: > Hi, > > I am confronted with a behaviour for which I do not have an explanation for. > > I am using NFS4 Kerberos

[Freeipa-users] SSSD Cache and Service Tickets

2017-05-15 Thread Ronald Wimmer
Hi, I am confronted with a behaviour for which I do not have an explanation for. I am using NFS4 Kerberos automounted homeshares and and recently I got a permission denied (reproducible when I restart autofs on the server I want to connect to) from the Windows Domain. So here's what I tried:

Re: [Freeipa-users] sssd cache

2012-12-07 Thread Natxo Asenjo
On Wed, Dec 5, 2012 at 3:29 PM, Simo Sorce s...@redhat.com wrote: As a test to show why the cache is important do this: 1. Create a directory 2. create 100 files in this dirctory 3. chown each file to a different user and a different group each 4. stop sssd, wipe cache file and restart 5.

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Dmitri Pal
On 12/05/2012 08:20 AM, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Going to the server for every identity lookup is very expensive and creates a lot of traffic. Some level of caching is needed to avoid unnecessary lookups. NSCD has been filling

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Jakub Hrozek
On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? I ask this because Windows admins are used to apply membership of groups to objects and the changes

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Natxo Asenjo
On Wed, Dec 5, 2012 at 3:11 PM, Jakub Hrozek jhro...@redhat.com wrote: On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? I ask this because Windows admins

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Jakub Hrozek
On Wed, Dec 05, 2012 at 03:19:51PM +0100, Natxo Asenjo wrote: On Wed, Dec 5, 2012 at 3:11 PM, Jakub Hrozek jhro...@redhat.com wrote: On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Simo Sorce
On Wed, 2012-12-05 at 14:20 +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? Yes, and not only on servers, on the client too. I ask this because Windows admins are used to apply

[Freeipa-users] sssd cache

2012-11-16 Thread Natxo Asenjo
hi, when running getent negroup netgroupname I get old entries. Apparently sssd is being helpful :-) and caching info, but it should not do it when I am connected to the domain (IMHO). According to

Re: [Freeipa-users] sssd cache

2012-11-16 Thread Stephen Gallagher
On Fri 16 Nov 2012 08:56:59 AM EST, Natxo Asenjo wrote: On Fri, Nov 16, 2012 at 2:52 PM, Natxo Asenjo natxo.ase...@gmail.com wrote: hi, when running getent negroup netgroupname I get old entries. Apparently sssd is being helpful :-) and caching info, but it should not do it when I am connected

Re: [Freeipa-users] sssd cache

2012-11-16 Thread Arpit Tolani
Hello On Fri, Nov 16, 2012 at 7:22 PM, Natxo Asenjo natxo.ase...@gmail.com wrote: hi, when running getent negroup netgroupname I get old entries. Apparently sssd is being helpful :-) and caching info, but it should not do it when I am connected to the domain (IMHO). According to

Re: [Freeipa-users] SSSD Cache

2010-06-30 Thread Simo Sorce
On Wed, 30 Jun 2010 15:39:48 -0400 Dan Scott danieljamessc...@gmail.com wrote: This has worked, now the client reports that user belongs to the correct groups. It also appears to correctly refresh the cache when I login. I have added and removed my user from a few groups and this is correctly

Re: [Freeipa-users] SSSD Cache

2010-06-29 Thread Dmitri Pal
Simo Sorce wrote: On Tue, 29 Jun 2010 16:51:39 -0400 Dan Scott danieljamessc...@gmail.com wrote: Hi, I'm using Fedora 13 with the new SSSD daemon (Which conflicts with the old nscd daemon). Does anyone know how to clear the cache of this service? I've added a user to a few groups and