sss_cache -E to invalidate all cache, you can be more refined with other options.

Regards
Angus


From: Russ Long via FreeIPA-users <freeipa-users@lists.fedorahosted.org>
Sent: 22 January 2021 16:39
To: freeipa-users@lists.fedorahosted.org <freeipa-users@lists.fedorahosted.org>
Cc: Russ Long <kd8fre@gmail.com>
Subject: [Freeipa-users] Re: Allow "sudo su - USER" to only the specified user
 
And caching is no fun.  The second option, to allow all commands to be run as the specified user works if I wait for the cache to expire.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.fedoraproject.org%2Fen-US%2Fproject%2Fcode-of-conduct%2F&amp;data=04%7C01%7C%7Cff773f8c876e449961bf08d8beebe885%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637469267720153097%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=1ItsgQ7oPMDifpI8Q%2F24LEScwQtn7RTykT06SIISX2c%3D&amp;reserved=0
List Guidelines: https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffedoraproject.org%2Fwiki%2FMailing_list_guidelines&amp;data=04%7C01%7C%7Cff773f8c876e449961bf08d8beebe885%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637469267720153097%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=mpCR9YEbYXgDAF6LkaEdiv8idXHhHCgLNxxrp8d9aJM%3D&amp;reserved=0
List Archives: https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.fedorahosted.org%2Farchives%2Flist%2Ffreeipa-users%40lists.fedorahosted.org&amp;data=04%7C01%7C%7Cff773f8c876e449961bf08d8beebe885%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637469267720153097%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=IF%2FkmQliCV2hblUqkhfFcGQIuUDqC6yKiFo8kVvLxSw%3D&amp;reserved=0