OCI Linux: Intermittent User Lookup Failure For Local or Remote Users While Using AD Authentication
Applies to:
Oracle Cloud Infrastructure - Version N/A and later
Linux x86-64
Symptoms
Oracle Linux server integrated with AD user is experiencing slow latency and connection failure in USER,GROUP lookup for Local and Remote User(AD).
Cause
/etc/sssd/sssd.conf
file is set with enumerate=true
parameter and it is resource intensive operation because it will read and display all the values attributes of a particular user or group.
Enumerating all entries has a negative impact on the server load and performance at the client.
Solution
Disable enumeration in /etc/sssd/sssd.conf
file because applications do not always require a complete set of users or groups and will request information about specific users or groups.