No SSSD support in snaps (nsswitch.conf)

The main reason is that both sssd and nscd cache user information, so stacking could out dated results being cached longer than expected. Imagine you request info that is cached in sssd just before it is set to expire. That might now be placed in nscd’s cache and be considered fresh past when sssd believes it is outdated.

You could minimise this by cranking down nscd’s TTL values to reduce the window.

1 Like