-pac: services = nss, pam

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/tuning_performance_in_identity_management/assembly_tuning-sssd-in-idm-servers-and-clients-for-large-idm-ad-trust-deployments_tuning-performance-in-idm
https://access.redhat.com/discussions/4334971
https://access.redhat.com/solutions/705623

--------

ignore_group_members = true

? enumerate = false
? ldap_referrals = false
? ldap_group_nesting_level = 0

systemctl stop sssd ; rm -rf /var/log/sssd/* /var/lib/sss/{db,mc}/* ; systemctl start sssd

BUG: https://access.redhat.com/solutions/3802321