Load individual group members when ignore_group_members = true

[Tim Biedert]

Hi,

I’m using SSSD in Ubuntu 15.04 to connect to my university’s Active Directory. 

Using ignore_group_members = true speeds things up significantly, that’s great.

Now I was wondering: Is there a possibility to make the SSSD load and cache the group
members of individual given groups, such that getent group name works again only for
certain groups of interest?

Thank you very much!

Best,
Tim

[Dmitri Pal]

On 08/17/2015 04:15 AM, Tim Biedert wrote:
>  Hi,
>
>  I’m using SSSD in Ubuntu 15.04 to connect to my university’s Active Directory. 
>
>  Using ignore_group_members = true speeds things up significantly, that’s great.
>
>  Now I was wondering: Is there a possibility to make the SSSD load and cache the group
> members of individual given groups, such that getent group name works again only for
> certain groups of interest?
>
>  Thank you very much!
>
>  Best,
>  Tim 

Thank would be an RFE to file.
https://fedorahosted.org/sssd/

>  _______________________________________________
>  sssd-users mailing list
>  sssd-users(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/sssd-users 

-- 
Thank you,
Dmitri Pal

Engineering Director, Identity Management and Platform Security
Red Hat, Inc.

[Jakub Hrozek]

On Mon, Aug 17, 2015 at 02:43:24PM -0400, Dmitri Pal wrote:
>  On 08/17/2015 04:15 AM, Tim Biedert wrote:
>  > Hi,
>  >
>  > I’m using SSSD in Ubuntu 15.04 to connect to my university’s Active Directory. 
>  >
>  > Using ignore_group_members = true speeds things up significantly, that’s great.
>  >
>  > Now I was wondering: Is there a possibility to make the SSSD load and cache the
> group members of individual given groups, such that getent group name works again only for
> certain groups of interest?
>  >
>  > Thank you very much!
>  >
>  > Best,
>  > Tim
>  
>  
>  Thank would be an RFE to file.
>  https://fedorahosted.org/sssd/ 
btw is there a reason you want this implemented? Is there some 3rd party
software that relies on getgr* output?