On Thu, Aug 02, 2012 at 10:58:10AM +0200, Pieter Baele wrote:

Hi,

How can I set the refresh interval for netgroup membership in sssd? I've tried using

entry_cache_netgroup_timeout

Yes, this option controls the cache timeouts for netgroups. If not specified, the value of entry_cache_timeout is used.

entry_cache_timeout

This option controls the cache timeout for all entries in general.

and ldap_enumeration_refresh_timeout ? enum_cache_timeout ?

These options control how often enumerations (requests for all objects) are run and how long does the SSSD cache the enumeration results.

They are only consulted if you set enumerate=True, the default is False.

For now, I deleted the caches...

There's one catch - the cache timeouts are stored in the cache as well when the entry is saved. It means that when the timeout values are changed, you need to either delete the cache or mark the entries as expired using the sss_cache tool.