#9828 Investigate and tune ipa and sssd conf
Opened 3 months ago by mobrien. Modified a day ago

Describe what you would like us to do:

Now that ipa is the main backend we should investigate what settings can be tuned to improve performance.
Also investigation should be carried out on which settings on the client side sssd can be updated. These settings may be different per host for example people will have a huge amount of users so may need a larger cache.

When do you need this to be done by? (YYYY/MM/DD)

Metadata Update from @mohanboddu:
- Issue tagged with: authentication, high-gain, medium-trouble, ops

3 months ago

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

3 months ago

I think #9827 is just one step towards this. We should look at what else can be done on both client and server side

Do we know everything that changes /etc/sssd/sssd.conf ? I think ipa-client-install does? Does anything else?
We need to make sure whatever we want in there is the default state and nothing is changing it under ansible...

I don't think IPA is changing this file after install, so it should be good to edit with ansible.

These changes still need to be made in prod. I will put it through

@mobrien I think this is done now and we can close this. Can you confirm?

Login to comment on this ticket.

Boards 2
ops Status: Backlog
mini-initative Status: Backlog