[Freeipa-users] Is there any delay after applied rules to user?

[Jakub Hrozek]

On Wed, Jul 29, 2015 at 10:03:14PM +0700, Dewangga wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello!
> 
> Thanks for the hints both of you, yes the sssd_cache is in play.
> I've set the cache to false, is it have any impact to ipa
> server/client (performance, security or another issue)?

How exactly did you 'disable' the cache? The sssd cache can't be
disabled, it can either be removed manually or the cache lifetime can be
set short..