On Thu, Jan 08, 2015 at 11:46:55AM -0700, Orion Poplawski wrote: > On 01/08/2015 10:18 AM, Lukas Slebodnik wrote: > > On (08/01/15 09:31), Orion Poplawski wrote: > >> contracts-grants is not in LDAP. > > You can filter request for non-LDAP users/groups in nss section of sssd.conf > > > > man sssd.conf -> filter_users, filter_groups > > Thanks, but I'm wondering why that user is even attempted to be looked up in > the first place - it's an email aliases.
Is the domain part of the e-mail address same as the sssd domain name perchance? > > I'm also seeing requests for the "postfix" user in sss, which is interesting > since it is in /etc/passwd, /etc/group. Perhaps looking up supplementary > group info? yes, initgroups(3) always cycles through all databases. This is a prime candidate for adding into filter_users -- I filter out pulse-rt and root on my laptop. _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
