From 579e1e23fb0bc7d6d4837cefb5b1c971cbd2223f Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Jan 28 2013 14:26:32 +0000
Subject: MAN: Clarify that saving users after enumerating large domain might be CPU intensive


https://fedorahosted.org/sssd/ticket/1732

---

diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index a68283e..7f10349 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -958,7 +958,10 @@ override_homedir = /home/%u
                             During this time, individual requests for
                             information will go directly to LDAP, though it
                             may be slow, due to the heavy enumeration
-                            processing.
+                            processing. Saving a large number of entries
+                            to cache after the enumeration completes might
+                            also be CPU intensive as the memberships have
+                            to be recomputed.
                         </para>
                         <para>
                             While the first enumeration is running, requests
@@ -973,6 +976,11 @@ override_homedir = /home/%u
                             For more information, refer to the man pages for
                             the specific id_provider in use.
                         </para>
+                        <para>
+                            For the reasons cited above, enabling enumeration
+                            is not recommended, especially in large
+                            environments.
+                        </para>
                     </listitem>
                 </varlistentry>
                 <varlistentry>