Now that ipa is the main backend we should investigate what settings can be tuned to improve performance. Also investigation should be carried out on which settings on the client side sssd can be updated. These settings may be different per host for example people will have a huge amount of users so may need a larger cache.
Metadata Update from @mohanboddu: - Issue tagged with: authentication, high-gain, medium-trouble, ops
Metadata Update from @mohanboddu: - Issue priority set to: Waiting on Assignee (was: Needs Review)
Maybe solved by #9827
I think #9827 is just one step towards this. We should look at what else can be done on both client and server side
Do we know everything that changes /etc/sssd/sssd.conf ? I think ipa-client-install does? Does anything else? We need to make sure whatever we want in there is the default state and nothing is changing it under ansible...
I don't think IPA is changing this file after install, so it should be good to edit with ansible.
These changes still need to be made in prod. I will put it through
@mobrien I think this is done now and we can close this. Can you confirm?
Metadata Update from @mobrien: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.