[SSSD] using ldb-tools to modify the cache

Stephen Gallagher sgallagh at redhat.com
Mon Aug 8 14:51:52 UTC 2011


On Mon, 2011-08-08 at 15:50 +0100, Michael Gliwinski wrote:
> Hello all,
> 
> Is it safe to use ldbmodify / ldbdel to modify the LDB cache in 
> /var/lib/sssd/db/ ?  Does the daemon need to be stopped?
> 

It should be safe to do even while the daemon is running.

> Obviously this is only for debugging, etc.  I'm currently trying to track down 
> a weird issue where SSSD is losing track of members of an LDAP group (i.e. all 
> member attribute values are OK in cache but only a subset or none of memberuid 
> values).  I wanted to expire an entry by either deleting it or resetting 
> dataExpireTimestamp.


SSSD 1.6.0 now includes a tool for this: sss_cache. It can expire one
entry, all entries of a type (users, groups, netgroups) or all entries
of all types.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110808/5089c965/attachment.sig>


More information about the sssd-devel mailing list