URL:
https://github.com/SSSD/sssd/pull/694
Title: #694: SSSCTL: user-show says that user is expired
pbrezina commented:
"""
This works well but there is one corner case that will print "Expired" instead
of "Never". If you will run `sss_cache -U` to invalidate all users (or
`sss_cache -u` to invalidate single user from files domain) it will set data expiration
time to 1 which will get past your check.
We do not have anything like "never expire" for ldap objects (expiration time
< current time means that the object is expired and needs to be updated, this apply for
expiration time = 0 as well). This is special case for files provider therefore I'd
rather check `sss_domain_info->provider == "files"` instead of the expiration
time itself.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/694#issuecomment-439030260