Re: [Freeipa-users] sssd cache

2012-12-05 Thread Dmitri Pal
On 12/05/2012 08:20 AM, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Going to the server for every identity lookup is very expensive and creates a lot of traffic. Some level of caching is needed to avoid unnecessary lookups. NSCD has been filling

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Jakub Hrozek
On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? I ask this because Windows admins are used to apply membership of groups to objects and the changes

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Natxo Asenjo
On Wed, Dec 5, 2012 at 3:11 PM, Jakub Hrozek jhro...@redhat.com wrote: On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? I ask this because Windows admins

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Jakub Hrozek
On Wed, Dec 05, 2012 at 03:19:51PM +0100, Natxo Asenjo wrote: On Wed, Dec 5, 2012 at 3:11 PM, Jakub Hrozek jhro...@redhat.com wrote: On Wed, Dec 05, 2012 at 02:20:40PM +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance

Re: [Freeipa-users] sssd cache

2012-12-05 Thread Simo Sorce
On Wed, 2012-12-05 at 14:20 +0100, Natxo Asenjo wrote: hi, why would I want sssd to cache group/hostgroup/netgroup membership? Is the performance hit so huge on the ldap servers? Yes, and not only on servers, on the client too. I ask this because Windows admins are used to apply