<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi all, There is no specific AD domain section. AD is used by using a Trust between IPA and AD. Thereś no need for a seperate AD domain section, is there? Kind regards, Winny <div class="moz-cite-prefix">Op 10-12-15 om 11:25 schreef Martin Kosek: </div> <blockquote cite="mid:56695335.9060601@redhat.com" type="cite"> <pre wrap="">On 12/09/2015 12:58 PM, Winfried de Heiden wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi all, Using entry_cache_timeout to set different cache timeout for sssd works well. However, it doesn't seem to work for Trusted Domain Users (using AD trust) I made some changes, cleaned the cache but expiry will stay on a (too long) 10 (ten!) hours! How can I change the sssd cache timeout for Trusted AD users ? (using IPA 4.1) Kind regards! </pre> </blockquote> <pre wrap=""> I assume the option has to be specified in the respective AD domain section. Can you share your anonymized sssd.conf so that we can verify your settings? </pre> </blockquote> </body> </html>