diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2015-05-26 18:11:08 +0200 |
|---|---|---|
| committer | Tomas Babej <tbabej@redhat.com> | 2015-06-30 12:50:00 +0200 |
| commit | 90788a25d6d54b084541336a83946d37a73076ef (patch) | |
| tree | 974abadb23ced81ad4a57a3f1997649a1fc646ee /ipa-client | |
| parent | bb1f45b7f093bcc07094cf65b66189125fa44bc7 (diff) | |
| download | freeipa-90788a25d6d54b084541336a83946d37a73076ef.tar.gz freeipa-90788a25d6d54b084541336a83946d37a73076ef.tar.xz freeipa-90788a25d6d54b084541336a83946d37a73076ef.zip | |
increase NSS memcache timeout for IPA server
Increasing memcache timeout to 600 seconds when configuring sssd on IPA server
should improve performance when dealing with large groups in trusts.
https://fedorahosted.org/freeipa/ticket/4964
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'ipa-client')
| -rwxr-xr-x | ipa-client/ipa-install/ipa-client-install | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 0f032888e..c46a7a8a6 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -1274,6 +1274,15 @@ def configure_sssd_conf(fstore, cli_realm, cli_domain, cli_server, options, clie # the master should only use itself for Kerberos domain.set_option('ipa_server', cli_server[0]) + # increase memcache timeout to 10 minutes when in server mode + try: + nss_service = sssdconfig.get_service('nss') + except SSSDConfig.NoServiceError: + nss_service = sssdconfig.new_service('nss') + + nss_service.set_option('memcache_timeout', 600) + sssdconfig.save_service(nss_service) + domain.set_option('ipa_domain', cli_domain) domain.set_option('ipa_hostname', client_hostname) if cli_domain.lower() != cli_realm.lower(): |