--On Friday, May 24, 2024 3:24 PM +0000 BECOT Jérôme jbecot@itsgroup.com wrote:
I wonder if increasing the frequency will also have a positive effects (as the though here is that there will be less entries to delete). I think that allocated pages in the mdb database won't change. Is there a safe way to reduce the db size ?
Increasing the frequency has helped for me in the past.
Finally, we considered not logging the sssd auth timestamp updates, but lastbind doesn't have any option to filter which branch is allowed to update, the only option is to set the precision to a higher value. Is there a way to achieve this ?
Increasing the precision is the only option at this time.
As a side note, in OpenLDAP 2.6, this functionality is part of the core slapd process and uses pwdLastSucces instead of authTimestamp to comply with the current ppolicy drafts.
--Quanah