URL:
https://github.com/SSSD/sssd/pull/274
Title: #274: Merge sss_cache and sss_debuglevel into sssctl
jhrozek commented:
"""
I still see value in having sssctl manage the cache expiration because especially for sudo
rules, we not only need to expire the rules in the cache, but also tell the deamon to
fetch the rules again. There I was thinking of having an interface provided by the IFP
responder that the tool could call into. And having a reliable way of expiring sudo rules
would be handy, it's something I see mentioned in support cases a log.
@lslebodn will probably have a better idea than I how to solve the packaging problem but
what about just moving the sss_cache wrapper to sssd-tools? Of course, upgrades will then
be problematic, because if someone doesn't have sss-tools installed, then sss_cache
would be 'lost' for this user on upgrade. But I'm not sure I have a better
idea short of forcing sss-tools on everyone who had sssd-common previously..
"""
See the full comment at
https://github.com/SSSD/sssd/pull/274#issuecomment-302773603