[SSSD-users] Re: Trying to use sssd to connect to large AD service - secondary groups not loading

[Jakub Hrozek]

On Wed, Aug 10, 2016 at 05:29:50AM -0000, Robert Sturrock wrote:
>  Hi All.
>  
>  I'm struggling a bit trying to get sssd (client is RHEL7.2, so using
> sssd-1.13.0-40.el7_2.1.x86_64) to connect to a large institutional AD (100k+ users, each
> user belonging to dozens or even hundreds of groups).  I'm following the instructions
> here:
>  
>     
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
>  
>  The config file (redacted slightly) is at the bottom. 
I suspect this might be 'just' a performance problem. We improved
performance quite a bit in what's going to become RHEL-7.3, but in the
meantime, can you check if this:
    ignore_group_members = true
makes any difference?

If not, we'd need to see the logs.