Hi,
Are you looking for the following options? Refer to man sssd-ipa(5)
ipa_hbac_refresh (integer)
The amount of time between lookups of the HBAC rules
against the IPA server. This will reduce the latency and load on the
IPA server if there are many access-control requests made in a short
period.
Default: 5 (seconds)
ipa_hbac_selinux (integer)
The amount of time between lookups of the SELinux maps
against the IPA server. This will reduce the latency and load on the
IPA server if there are many user login requests made in a short
period.
Default: 5 (seconds)
On Fri, Jan 22, 2021 at 1:03 PM Judd Gaddie <[email protected]> wrote:
>
> Hi, how can I change/configure the HBAC refresh timeout ?
>
> Stephen Gallagher mentioned it here https://pagure.io/SSSD/sssd/issue/1047
>
> It appears that the default value may have changed from 1 minutes to 1 second
> in a newer release.
> _______________________________________________
> sssd-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
