All,

We’re tracking down login and sudo slowness in RHEL7 when using sssd/AD as
a backend.  30 – 45 seconds (or more) of slowness.

Only in RHEL7 – not in RHEL6 or RHEL8.

We worked with our vendor – we’re pretty sure we’re got it.  It’s due to
this RHEL7 bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1532105

But along the way, in our research we encountered this sage bit of advice:

https://superuser.com/questions/1343631/sssd-nss-slow-when-using-sudo

In simple terms “local providers before remote providers”.  Thus “systemd”
before “sss”.

Does this recommendation still stand?

So if still in force, is this /etc/nsswitch.conf setting recommended?

                passwd:  systemd files sss

                group:  systemd files sss

Or is this better:

passwd: files systemd sss

                group:  files systemd sss

Or does it not matter?

Spike
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to