[SSSD-users] sssd email login performance

[Galen Johnson]

Hey,


We're looking into why our servers are suddenly less performant with authentications
than they used to be.  We have SSSD set up to allow users to login with their email
address.  However, the email addresses are from various domains.  It appears that sssd
still attempts to break apart the address and refer to the @user.domain.  Is there a way
to prevent sssd from attempting to lookup the user for a domain it doesn't manage? 
I've looked through the man pages and had hoped that setting "subdomain_provider
= none" would help but it appears not to be the case.  We're still looking
through the logs.  Based on how ldap/ad would normally handle this id (user(a)example.com),
it's typically expected behavior but it'd be nice to override this if possible and
just defer to the sssd domain.


I hope that made sense.


thanks


=G=