HI!
I'm currently trouble-shooting performance issues on CentOS 6.10 running sssd 1.13.3 using sssd-ad as backend.
Enumeration is already disabled.
Also these options were set (DNS names obfuscated):
ad_enabled_domains = ad1.example.com ad_server = dc1.ad1.example.com, dc2.ad1.example.com ad_enable_dns_sites = false
Looking sssd still asks various naming contexts of the *many* other trusted domains.
Any clue how to effectively disable all "foreign" lookups?
Ciao, Michael.
sssd-users@lists.fedorahosted.org