<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> And finally, FYI, I think there is a problem to run both sssd and lightdm (but other dm too) : - facing a huge ldap directory - configured lightdm with greeter-hide-users=true - sssd with enumerate=false then lightdm hangs - so we tried sssd with enumerate=true and still lightdm greeter-hide-users=true - it runs well, but with sssd default values, every 120 sec the cache is refreshed and our ldap server get overloaded (a bit difficult to realize because with only one workstation for testing, the load problem is not present). - as a bonus, we have 120 workstations running and with sssd enum_cache_timeout left with the default, roughly, every second there is a worstation doing cache enumerations requests (for info about all users) . Currently, I hope to have fixed the problem by setting enum_cache_timeout to 10 hours ... Yesterday, Jakub Hrozek (sssd developper) wrote me the following : <pre wrap="">>> Wow, if they rely on getpwent() and friends, then I would call lightdm >> broken, sorry.. I guess using something like utmp and providing a button >> to type in the username would be much better.. Hope this help. Cheers. </pre> <pre class="moz-signature" cols="160">-- François Université de Rennes </pre> </body> </html>