Hi Sumit, setting 'pam_initgroups_scheme = never' indeed helps with not retrieving group memberships during the lock screen. However, the request time is indeed long still, I don't think setting pam_id_timeout to a high value is really smart to do.. Although it helps with speeding up requests as it uses the memory cache more often, it will have he side effect of not loading AD groups? Are there any other negative side effects?
Greetings, Robert _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
