[SSSD] sss_cache flush ssh hosts list.

William william at firstyear.id.au
Mon May 26 01:41:16 UTC 2014


> I'm afraid there is no right thing to call ATM, as there is no support 
> for cache invalidation in SSH host code. I guess you'll have to 
> implement it yourself.
> 
> Off the top of my head, you need to properly set SYSDB_CACHE_EXPIRE in 
> sysdb_store_ssh_host, return only unexpired hosts in 
> sysdb_get_ssh_known_hosts, make sysdb_search_ssh_hosts public and create 
> sysdb_set_ssh_host_attr (sysdb_update_ssh_hosts does the same, so you 
> can modify and rename it instead of writing a completely new function).

Please find attached a patch that adds the functionality. Note that
ssh_hosts don't use the dataExpire attribute, they use a different
attribute, which is why I opted to call ssh_known_host_expire.

-- 
William <william at firstyear.id.au>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-sss_cache-to-expire-sshKnownHosts.patch
Type: text/x-patch
Size: 8343 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140526/b96cbaca/attachment.bin>


More information about the sssd-devel mailing list