Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been working with implementing LDAP in our servers. We are using SSSD instead of nscd/nslcd to communicate with the LDAP server.

One of the options in SSSD is enumeration. Enabling it solved an issue we were having while implementing the LDAP-client on RHEL.

  • Can somebody explain more clearly what LDAP enumeration means?
  • How does enabling/disabling LDAP enumeration affect the environment?
  • Is this an LDAP-specific or a SSSD-specific term?

I was unable to find much information around this feature, so hopefully this Serverfault question can help other people as well.

share|improve this question


Enumeration means that the entire set of available users and groups on the remote source is cached on the local machine. When enumeration is disabled, users and groups are only cached as they are requested. For performance reasons, it is recommended that you disable enumeration for domains with many users and groups.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.