No,
But you can use nscd with [services passwd group netgroup] caches disabled.
-----Original Message----- From: Harald Dunkel via FreeIPA-users [mailto:freeipa-users@lists.fedorahosted.org] Sent: vrijdag 7 juli 2017 10:15 To: FreeIPA users list Cc: Harald Dunkel Subject: [Freeipa-users] sssd providing dns cache?
Hi folks,
does sssd provide a dns cache via nss?
Regards Harri _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
On Fri, 7 Jul 2017 08:27:53 +0000 "wouter.hummelink--- via FreeIPA-users" freeipa-users@lists.fedorahosted.org wrote:
No,
I would suggest to add it.
But you can use nscd with [services passwd group netgroup] caches disabled.
I saw the documentation about this on RedHat's wiki, but I would prefer having a single service. Apparently sss and nscd are in conflict to each other (except for DNS).
Regards Harri
On Fri, Jul 07, 2017 at 10:47:44AM +0200, Harald Dunkel via FreeIPA-users wrote:
On Fri, 7 Jul 2017 08:27:53 +0000 "wouter.hummelink--- via FreeIPA-users" freeipa-users@lists.fedorahosted.org wrote:
No,
I would suggest to add it.
Well, we are considering adding support for the hosts map in the next version, but not as a means of DNS caching, but as a way to support users who were running "hosts: ldap" with nslcd so that these users have one less reason to mix and match nslcd and sssd on a single host.
I don't think DNS caching in general is something SSSD should do.
But you can use nscd with [services passwd group netgroup] caches disabled.
I saw the documentation about this on RedHat's wiki, but I would prefer having a single service. Apparently sss and nscd are in conflict to each other (except for DNS).
Regards Harri
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
On Mon, 10 Jul 2017 16:16:42 +0200 Jakub Hrozek via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
I don't think DNS caching in general is something SSSD should do.
IMU dns is just another remote directory service. Caching dns would be interesting to speed up dns lookups and in case of vpn network problems, for example. sssd caches ldap for similar reasons.
Regards Harri
On ti, 11 heinä 2017, Harald Dunkel via FreeIPA-users wrote:
On Mon, 10 Jul 2017 16:16:42 +0200 Jakub Hrozek via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
I don't think DNS caching in general is something SSSD should do.
IMU dns is just another remote directory service. Caching dns would be interesting to speed up dns lookups and in case of vpn network problems, for example. sssd caches ldap for similar reasons.
dnsmasq, for example, is a good caching DNS server already.
freeipa-users@lists.fedorahosted.org