Sssd cache - Revision history

Busk at 16:50, 27 July 2022

2022-07-27T16:50:37Z

Busk at 16:49, 27 July 2022

2022-07-27T16:49:25Z

Busk at 16:46, 27 July 2022

2022-07-27T16:46:41Z

Busk at 16:41, 27 July 2022

2022-07-27T16:41:58Z

Busk: Created page with "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sssd-cache https://access.redhat.com/discussions/3352911 https://serverfaul..."

2022-07-27T16:41:19Z

Created page with "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sssd-cache https://access.redhat.com/discussions/3352911 https://serverfaul..."

New page

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sssd-cache

https://access.redhat.com/discussions/3352911

https://serverfault.com/questions/506507/sssd-and-ldap-authentication-cache#:~:text=You%20can't%20disable%20caching,if%20that's%20what%20you%20want.
```
You can't disable caching completely with sssd.

You can disable sss as an authentication provider completely and just query LDAP directly if that's what you want.

For example, in /etc/nsswitch.conf, change lines like:

passwd: files sss
to

passwd: files ldap
```

← Older revision		Revision as of 16:50, 27 July 2022
Line 32:		Line 32:

	passwd: files ldap		passwd: files ldap
		+	```
		+
		+	```
		+	sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8). sss_rpcidmapd(5)
		+
		+	Pages related to sssctl
		+	sss_cache (8) - perform cache cleanup
		+	sss_debuglevel (8) - change debug level while SSSD is running
		+	sss_groupadd (8) - create a new group
		+	sss_groupdel (8) - delete a group
		+	sss_groupmod (8) - modify a group
		+	sss_groupshow (8) - print properties of a group
		+	sss_obfuscate (8) - obfuscate a clear text password
		+	sss_override (8) - create local overrides of user and group attributes
	```		```

@@ Line 12: / Line 12: @@
 https://pagure.io/SSSD/sssd/issue/3886
 ```
 SSS_NSS_USE_MEMCACHE=NO
 ```

← Older revision		Revision as of 16:46, 27 July 2022
Line 9:		Line 9:
	```		```

		+
		+	https://pagure.io/SSSD/sssd/issue/3886
		+	```
		+	SSS_NSS_USE_MEMCACHE=NO
		+	```

← Older revision		Revision as of 16:41, 27 July 2022
Line 1:		Line 1:
	https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sssd-cache		https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sssd-cache
		+	```
		+	Most commonly, this is used to clear the cache and update all records:
		+	~]# sss_cache -E
		+	The sss_cache command can also clear all cached entries for a particular domain:
		+	~]# sss_cache -Ed LDAP1
		+	If the administrator knows that a specific record (user, group, or netgroup) has been updated, then sss_cache can purge the records for that specific account and leave the rest of the cache intact:
		+	~]# sss_cache -u jsmith
		+	```