Why enumeration is not recommended on sssd domain definitions?
Issue
- In sssd domains there is an option to define whether sssd will enumerate all the entries of that domain or not. Why it is recommended to not enable it?
-
id
andgetent
command taking too much time to show/display/fetch/resolve users(uid) and groups(gid) information after configuring/enabling/setting enumeration insssd.conf
as:enumerate = true
Environment
- Red Hat Enterprise Linux
- sssd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.