1

CentOS 7 + SSSD + AD

AD user is created through bash script. To confirm the AD user account is created I am using getent passwd <username>. It is not returning the user account created in AD immediately, but it is returning the user account after a minute or so when using the same getent passwd <username>.

Is there any config parameter to change in sssd.conf?

Jenny D
  • 27,780
  • 21
  • 75
  • 114
sathish kannan
  • 11
  • 1
  • 2

2 Answers2

0

This is expected, enumerating all users and storing them to the cache (with enumerate=True) is expensive and runs only periodically.

Running getent passwd $username should yield the user immediatelly, though.

jhrozek
  • 1,370
  • 6
  • 5
0

Setting:

enumerate = true

will allow sssd to get all the valid user details and store them but comes at a price if you have a large number of users according to the man page for sssd.conf (Here's a link to it: https://linux.die.net/man/5/sssd.conf). From experience, we have 700+ and it's not a problem.

Also setting:

cache_credentials = true

should help, but should already be set. Details on same man page.

CorranM
  • 66
  • 1
  • 3