>> Of course it should be possible to dig out that information
by
>> grepping logs or by using ldapsearch but with several domains
>> configured (and in the future trusts and sub-domains also in play)
>> it's getting a bit laborious to manually construct LDAP queries for
>> each domain or plunge into cache files to find out information about
>> a user's origin or group memberships instead of just doing something
>> like "sss_search -u jdoe", just as Ondrej says.
>
> As Marko said, "sss_search -u jdoe" would be nice. I also expect it to
> return more than what 'getent' does - i.e. things like mail address,
> telephone number,... ok these might not be important now, but
> certainly will be in the future (imagine sssd being queried by mailing
> client or ekiga/pidgin).
These are certainly worth considering. The preferred method of
requesting such changes is to file enhancement tickets at
https://fedorahosted.org/sssd so that they will not get forgotten and
can be scheduled appropriately.
I've filed a generic ticket about such a tool and few separate tickets
about certain features - please feel free to complement them: