On Tue, Feb 25, 2020 at 11:17:17AM +0100, Ronald Wimmer via FreeIPA-users wrote:
If SSSD has cache_credentials set to True it will take some time
until
changes become visible on an IPA client. When I change sudo permissions for
a certain user I usually want to changes to be effective immediately. Does
this imply setting cache_credentials to False or what are best practices
here?
Hi,
'cache_credentials' only control is the credentials given by the user,
typically this is a password, is stored in the cache in a hashed
version.
To invalidate the sudo rules on a single host you can call
sss_cache -R
on this host.
HTH
bye,
Sumit
Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...