All,
We’re tracking down login and sudo slowness in RHEL7 when using sssd/AD as
a backend. 30 – 45 seconds (or more) of slowness.
Only in RHEL7 – not in RHEL6 or RHEL8.
We worked with our vendor – we’re pretty sure we’re got it. It’s due to
this RHEL7 bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1532105
But along the way, in our research we encountered this sage bit of advice:
https://superuser.com/questions/1343631/sssd-nss-slow-when-using-sudo
In simple terms “local providers before remote providers”. Thus “systemd”
before “sss”.
Does this recommendation still stand?
So if still in force, is this /etc/nsswitch.conf setting recommended?
passwd: systemd files sss
group: systemd files sss
Or is this better:
passwd: files systemd sss
group: files systemd sss
Or does it not matter?
Spike