Learn more about these different git repos.
At the moment, pretty much every back end request towards an IPA server includes checking if the requested filter value (e.g. name, ID) is an override or if it can be looked up directly.
This can be quite expensive, especially if multiple domains are involved. Consider looking up an ID - for N domains, the current code looks up N times if it's an override in the same override container and then it can even shortcut the request if the ID doesn't map to a SID from the current domain.
It would help performance quite a bit if SSSD fetched the overrides periodically and evaluated the overrides from the cache only.
Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.1
to comment on this ticket.