Hey,

We're looking into why our servers are suddenly less performant with 
authentications than they used to be.  We have SSSD set up to allow users to 
login with their email address.  However, the email addresses are from various 
domains.  It appears that sssd still attempts to break apart the address and 
refer to the @user.domain.  Is there a way to prevent sssd from attempting to 
lookup the user for a domain it doesn't manage?  I've looked through the man 
pages and had hoped that setting "subdomain_provider = none" would help but it 
appears not to be the case.  We're still looking through the logs.  Based on 
how ldap/ad would normally handle this id ([email protected]), it's typically 
expected behavior but it'd be nice to override this if possible and just defer 
to the sssd domain.


I hope that made sense.


thanks


=G=
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to