Hi Jakub,

When we add new users to existing IPA server, Ideally they should get reflected to all the hosts(client) which are registered with the IPA server. However, it is not happening until we manually restart sssd after clearing the existing files from /var/lib/sssd/db.

We have implemented the sssd cache as well. However it seems to be working for existing users.




Best Regards,
__________________________________________
Yogesh Sharma
Email: yks0000@gmail.com | Web: www.initd.in 

RHCE, VCE-CIA, RACKSPACE CLOUD U Certified

      

On Mon, Sep 14, 2015 at 9:08 PM, Jakub Hrozek <jhrozek@redhat.com> wrote:
On Mon, Sep 14, 2015 at 08:04:58PM +0530, Yogesh Sharma wrote:
> Hi Team,
>
> We are using sssd with FreeIPA. Whenever we add a new server in FreeIPA, it
> does not get reflected to clients.

Can you be more specific in describing the issue? Are you adding a new
replica, but the clients do not connect to it?

> We have implemented the cache refresh
> intervals as well. However, in some use cases , the issue only get resolved
> we we delete
>
> /var/lib/sssd/db/* and restart the sssd service.
>
> Is there any config settings for the same which do full refresh of DB.
>
> Currently, below is the sssd config:
>
>
> enumerate = False
> entry_cache_timeout = 60
> refresh_expired_interval = 30
> entry_cache_sudo_timeout = 60
> entry_cache_netgroup_timeout = 60
> ldap_enumeration_refresh_timeout = 60
> ldap_purge_cache_timeout = 60
> ldap_sudo_smart_refresh_interval = 60
> cache_credentials = false
>
>
>
>
> *Best Regards,*
>
> *__________________________________________*
>
> *Yogesh Sharma*
> *Email: yks0000@gmail.com <yks0000@gmail.com> | Web: www.initd.in
> <http://www.initd.in/> *
>
> *RHCE, VCE-CIA, RACKSPACE CLOUD U Certified*
>
> <https://www.fb.com/yks0000>   <http://in.linkedin.com/in/yks0000>
> <https://twitter.com/checkwithyogesh>
> <http://google.com/+YogeshSharmaOnGooglePlus>

> _______________________________________________
> sssd-users mailing list
> sssd-users@lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users

_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users