On Thu, Dec 17, 2020 at 10:58:32AM +0100, Thomas HUMMEL wrote: > > > On 16/12/2020 17:47, Sumit Bose wrote: > > On Tue, Dec 15, 2020 at 02:53:28PM +0100, Thomas HUMMEL wrote: > > > > the reason for the difference is that 'id' without a username [...] > > Hello, > > thanks for your answer.It's very clear. > > However I still cannot figure out where, in the case of 'id <username>`, the > 5 *min* delay I see comes from. > In sssd.conf I configured entry_cache_user_timeout = 5 (*sec*) so the > timeout must correspond to another setting but I don't see which one.
Hi, this is indeed related to the different caches of SSSD. The entry_cache_*_timeout options determine the lifetimes of the object in the on-disk cache in /var/lib/sss/db/. But to speed up common lookups SSSD uses a memory mapped cache as well which is directly accessed by SSSD's nss plugin so that the client does not has to talk to SSSD but can read the needed data from memory directly.For the cache there is the option 'memcache_timeout' which has a default of 300s (aka 5 min). Please note that we are using different options here on purpose because the memory cache is primarily used by the glibc nss interface while the on-disk cache is used in other way as well. So it might be useful to be able to configure the timeouts independently. HTH bye, Sumit > > Thanks for your help > > -- > Thomas HUMMEL > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
