sss_cache -E to invalidate all cache, you can be more refined with other options.
Regards
Angus
From: Russ Long via FreeIPA-users <freeipa-users@lists.fedorahosted.org> Sent: 22 January 2021 16:39 To: freeipa-users@lists.fedorahosted.org <freeipa-users@lists.fedorahosted.org> Cc: Russ Long <kd8fre@gmail.com> Subject: [Freeipa-users] Re: Allow "sudo su - USER" to only the specified user