[SSSD] Ldap question: How to quickly see changes to a user's group list.

steve steve at steve-ss.com
Tue Mar 25 10:14:00 UTC 2014


On Mon, 2014-03-24 at 22:36 -0400, Mark London wrote:
> Hi - We are running an LDAP server on a Windows box.  We have a need for our Linux clients to be able to quickly see 
> modifications we make to a user's account, i.e. adding a group to an account. The only way that I've found to be able to 
> do this, is to set ldap_enumeration_refresh_timeout to a small amount of time.  Is there a better way to do this (that 
> uses less cpu)?  Thanks. - Mark

Hi
sss_cache -UG
should get you there. If not and you get desperate, rm the files at:
/var/lib/sss/db/*
and restart.
Make sure that nscd is not running.
HTH
Steve





More information about the sssd-devel mailing list