>> Of course it should be possible to dig out that information
>> grepping logs or by using ldapsearch but with several domains
>> configured (and in the future trusts and sub-domains also in play)
>> it's getting a bit laborious to manually construct LDAP queries for
>> each domain or plunge into cache files to find out information about
>> a user's origin or group memberships instead of just doing something
>> like "sss_search -u jdoe", just as Ondrej says.
> As Marko said, "sss_search -u jdoe" would be nice. I also expect it to
> return more than what 'getent' does - i.e. things like mail address,
> telephone number,... ok these might not be important now, but
> certainly will be in the future (imagine sssd being queried by mailing
> client or ekiga/pidgin).
These are certainly worth considering. The preferred method of
requesting such changes is to file enhancement tickets at
so that they will not get forgotten and
can be scheduled appropriately.
I've filed a generic ticket about such a tool and few separate tickets
about certain features - please feel free to complement them: