On 7/22/25 16:48, Christopher Paul via sssd-users wrote:
On 7/22/25 14:53, John Hodrien wrote:
[...]
That's my understanding anyway, but I'm not an expert.
You're probably right, but it would be nice if SSSD could retrieve
groups for a user but not look up all the members attribute values for
all the other members of each group to which one user belongs.
I notice that with "ignore_group_members = true", that the "groups
<uid>" command still works.
Oh blast it. Actually with "ignore_group_members = true", "id <uid>"
also works, and it does not look up all the members attribute values for
all the other members of each group to which one user belongs. So this
feature does exist and it's called "ignore_group_members = true".
But I guess it would be nice if "getent group <group name>" worked to
list all members without looking up their user values. I see no reason
why a group lookup should cause all members' attribute values to be
looked up.
Chris
--
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
