Well, I would like to see something like 'adquery' or
Centrify - i.e. tool that would: 1. enumerate maps like group, passwd,
automount... getent can not do everything 2. Display information about a
user (account active, disabled, locked,...) 3. Group membership - how was
group membership computed (in ldap we can have nested groups, not all
groups have Unix attributes defined) 4. Status about connection to the
domain (connected/disconnected,...) + all details (like ldap controller
being connected...) 5. Version running
In general some too that would help in case of any problems. Reconfiguring
sssd for higher debug level & restarting & inspecting logs - this all
takes a lot of time....
If this is for the purpose of debugging, you can use ldbsearch on SSSD's local
cache. Sure, the output is crude and not very user friendly but you will get
basically every information you can get.