第9章 Tuning SSSD performance for large IdM-AD trust deployments

Procedure

1. Open the /etc/sssd/sssd.conf configuration file in a text editor.

2. Add the following options to the [domain] section for your Identity Management (IdM) domain:

   [domain/<idm_domain_name>]
   ignore_group_members = true
   subdomain_inherit = ignore_group_members
   ...

   注記

   Settings listed in the subdomain_inherit options apply to both the main (IdM) domain as well as the trusted AD domain(s).

3. Save and close the /etc/sssd/sssd.conf file on the server.

4. Restart the SSSD service to load the configuration changes.

   [root@client ~]# systemctl restart sssd