In order to provide better performance of sssd in server mode, we should increase the memory cache time-out.
After a discussion we decided to not increase the default value of memcache_timeout in sssd. It's already high enough (5 minutes) for most use cases. On the other hand, sssd in ipa server mode is different use case and might need to have different value.
The options memcache_timeout should be cahnged in [nss] section of /etc/sssd.conf
What is the suggested value for this setting?
Also, is this request anyhow related to slapi-nis? It should have switched from utilizing NSS interface already.
I think setting it to 8-10 minutes should help with caching of large groups in trusted setups.
We are talking about SSSD timeouts of keeping valid memory caches before communicating from nss_sss module to sssd processes. Regardless the way slapi-nis talks to nss_sss (it does load it directly via dl_load() now) the timeout is affecting slapi-nis.
master:
Metadata Update from @lslebodn: - Issue assigned to mbabinsk - Issue set to the milestone: FreeIPA 4.2
Login to comment on this ticket.