Ubuntu
openldap package

  1. Bug #929888
  2. Comment #11

Comment 11 for bug 929888

Revision history for this message
In , Jakub (jakub-redhat-bugs) wrote :

(In reply to comment #3)
> Ah ok, I removed the cache file and it's reproducible again. But still not sure
> why it started to work.

SSSD caches the entries internally into an on-disk cache (as you figured out). I believe that the second request came straight out of the cache without even contacting SSSD.

If you set:
entry_cache_timeout = 1
into the [domain/redhat.com] section of your sssd.conf, then all cache entries will be only valid for 1 second, so even the second request should go all the way into the LDAP code.