[SSSD] Ldap question: How to quickly see changes to a user's group list.
steve
steve at steve-ss.com
Tue Mar 25 10:14:00 UTC 2014
On Mon, 2014-03-24 at 22:36 -0400, Mark London wrote:
> Hi - We are running an LDAP server on a Windows box. We have a need for our Linux clients to be able to quickly see
> modifications we make to a user's account, i.e. adding a group to an account. The only way that I've found to be able to
> do this, is to set ldap_enumeration_refresh_timeout to a small amount of time. Is there a better way to do this (that
> uses less cpu)? Thanks. - Mark
Hi
sss_cache -UG
should get you there. If not and you get desperate, rm the files at:
/var/lib/sss/db/*
and restart.
Make sure that nscd is not running.
HTH
Steve
More information about the sssd-devel
mailing list