#4012 SSSD is not refreshing cached user data for the ipa sub-domain in a IPA/AD trust
Closed: Fixed 2 years ago by jhrozek. Opened 2 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla: Bug 1657978

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

We already support refreshing users, groups and netgroups on the background periodically, but only for the joined domain and only using LDAP provider primitives. It would be helpful in busy AD-IPA trust scenarios to let the IPA servers refresh the data on the background to limit the time the clients need to wait to refresh large nested group hierarchies.


Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1657978

2 years ago

Metadata Update from @jhrozek:
- Issue assigned to jhrozek

2 years ago

Metadata Update from @jhrozek:
- Issue tagged with: PR, RFE

2 years ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.3 (was: SSSD 2.2)

2 years ago

Commit cdc44a0 relates to this ticket

Commit 7a08d1d relates to this ticket

Commit 039384b relates to this ticket

Commit 60c876a relates to this ticket

Commit 7922350 relates to this ticket

Commit 1d0e75e relates to this ticket

Commit 576f369 relates to this ticket

Commit 0fbc317 relates to this ticket

master:
cdc44a0
7a08d1d
039384b
60c876a
7922350
1d0e75e
d76756e
b72adfc
576f369
0fbc317
7443498
2cb294e
ac72bb4
41305ef
d1eb0a7
9d49c90
bb0bd61
1a08b53
f279552
db99504

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Test case provided upstream in freeipa workspace:
ipatests/test_integration/test_sssd.py::TestSSSDWithAdTrust::test_sssd_cache_refresh

master:
https://pagure.io/freeipa/c/7c059c81ce61d70ec3c855881902a8ca1f08eeed
https://pagure.io/freeipa/c/8dd663e0c2cbc6c6fec43ffcc09259f9be336429

ipa-4-8:

  • 1d416a5a5ceaaf3fff9df423cea9114f1918aad2 ipatests: provide docstrings instead of imporperly placed comments
  • 40fd96f27d2512212ac99fff9ace0fef1f5a57d4 ipatests: add test for SSSD updating expired cache items

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4983

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata