On Thu, 11 Aug 2011, Michael Gliwinski wrote: > On Wednesday 10 Aug 2011 18:59:14 Paul Heinlein wrote: >> Oddly, when using sssd+ldap, getent without a specific key won't >> return ldap account information, but with a key it will. That is, >> "getent passwd" will return only accounts in the local /etc/passwd >> database, but "getent passwd bob" will return ldap-supplied >> information about user bo > > That is normal unless you have 'enumerate = true' for the LDAP domain in SSSD > config file. Note that SSSD manual warns that this may be slow for large > installations (personally I haven't had a problem with it yet but only have < > 200 posix users).
I can confirm that With tens of thousands it's cripplingly slow. jh _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
