![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=772944
https://bugzilla.novell.com/show_bug.cgi?id=772944#c7
Jakub Hrozek
Hello,
I installed a SLES 11 SP2 and tested the new sssd function and found only questions ;).
1: When I select sssd in YaST2, afterward I have warnings for nscd for caching passwd and group (?), this is enabled in nscd config after starting sssd, but should be disabled (?) like Documentation.
In the SSSD upstream, we advise against enabling nscd for those NSS maps where the SSSD is used. The reasoning is that the SSSD provides its own caching mechanism and nscd's caching might clash with SSSD's One of the caching features that the SSSD has and the nscd does not have is that the initgroups() operation is always performed against the remote server during authentication, but can be returned from cache otherwise. This results in group memberships being always accurately reflected during login.
Or have sssd now the functionality to replace nscd full (?) but nscd is not stopped?
Not yet (and probably not for quite some time). The SSSD currently provides support for these NSS maps: * passwd * group * netgroup * services Other maps such as protocol or hosts are not implemented. If you need caching for these maps, then I would recommend only enabling nscd for the maps you are using but the SSSD is not providing. Speed-wise, nscd was quite faster than SSSD, however, the upcoming SSSD 1.9.0 release is going to include a new "fast memory cache" that is going to improve the cache performance significantly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.