From f732a95cb328297df6fb17d184864ce856b4cf3f Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: May 27 2021 18:05:40 +0000
Subject: ipsilon / sssd: try and set ldap_dref_threshold to 0 to improve things with sssd


Signed-off-by: Kevin Fenzi <kevin@scrye.com>

---

diff --git a/roles/ipsilon/templates/sssd.conf b/roles/ipsilon/templates/sssd.conf
index ed577d6..f929ffa 100644
--- a/roles/ipsilon/templates/sssd.conf
+++ b/roles/ipsilon/templates/sssd.conf
@@ -10,6 +10,7 @@ access_provider = ipa
 cache_credentials = True
 ldap_tls_cacert = /etc/ipa/ca.crt
 krb5_store_password_if_offline = True
+ldap_deref_threshold = 0
 sudo_provider = ipa
 autofs_provider = ipa
 subdomains_provider = ipa