On Thu, Jan 08, 2015 at 11:46:55AM -0700, Orion Poplawski wrote:
On 01/08/2015 10:18 AM, Lukas Slebodnik wrote:
> On (08/01/15 09:31), Orion Poplawski wrote:
>> contracts-grants is not in LDAP.
> You can filter request for non-LDAP users/groups in nss section of sssd.conf
>
> man sssd.conf -> filter_users, filter_groups
Thanks, but I'm wondering why that user is even attempted to be looked up in
the first place - it's an email aliases.
Is the domain part of the e-mail address same as the sssd domain name
perchance?
I'm also seeing requests for the "postfix" user in sss, which is
interesting
since it is in /etc/passwd, /etc/group. Perhaps looking up supplementary
group info?
yes, initgroups(3) always cycles through all databases.
This is a prime candidate for adding into filter_users -- I filter out
pulse-rt and root on my laptop.