I work at a company with a massive AD infrastructure. Is there any way to specify a
specific OU to search through instead of just providing a top level DN? We use sssd for
all our authing needs on our linux machines and would like to do something like below:
ldap_user_search_base = OU=Employees,OU=blah users,DC=blah,DC=com
enumerate = false
When I connect on cli it looks like Ovirt is reaching out and grabbing a ton of info it
doesn't really need. It takes on average 40 second to allow me to log in on CLI or UI.
This is not an AD issue as we use AD on everything in our labs and have no issues with
speed.
I applied these changes and it didn't speed anything up.
https://ovirt.org/develop/release-management/features/infra/aaa_faq/
I can see from a tcpdump that I am in fact hitting my local AD servers and not going
across the world to get an answer.
Thanks!