I have further noticed that the difference is coming from additional calls from 
sssd to ldap (from a tcpdump)

It looks like in both cases caching is not working as for every sudo -u user 
"cmd" a call is being made to ldap however in the slower case it is making 
additional calls (I can't see what they are because they are all tls/ldap)

I am unsure if this is expected behavior ?

I am going to try tweak the sudo rule caching options.
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to