[sssd PR#5597][comment] sss_cache: reset original timestamp and USN
by elkoniu
URL: https://github.com/SSSD/sssd/pull/5597
Title: #5597: sss_cache: reset original timestamp and USN
elkoniu commented:
"""
The reason why upstream CI fails:
```
=================================== FAILURES ===================================
_________________________ test_user_show_basic_sanity __________________________
Traceback (most recent call last):
File "/shared/sssd/src/tests/intg/test_sssctl.py", line 227, in test_user_show_basic_sanity
assert output.find("Initgroups expiration time: Initgroups were not yet "
AssertionError: assert -1 != -1
+ where -1 = <built-in method find of str object at 0x7f9d65e46e00>('Initgroups expiration time: Initgroups were not yet performed')
+ where <built-in method find of str object at 0x7f9d65e46e00> = 'Name: user1\nCache entry creation date: 05/06/21 10:30:42\nCache entry last update time: 05/06/21 10:30:42\nCache entry expiration time: 05/06/21 12:00:42\nInitgroups expiration time: Expired\nCached in InfoPipe: No\n'.find
_________________________ test_user_show_basic_fqname __________________________
Traceback (most recent call last):
File "/shared/sssd/src/tests/intg/test_sssctl.py", line 255, in test_user_show_basic_fqname
assert output.find("Initgroups expiration time: Initgroups were not yet "
AssertionError: assert -1 != -1
+ where -1 = <built-in method find of str object at 0x7f9d65e468b0>('Initgroups expiration time: Initgroups were not yet performed')
+ where <built-in method find of str object at 0x7f9d65e468b0> = 'Name: user1@LDAP\nCache entry creation date: 05/06/21 10:30:44\nCache entry last update time: 05/06/21 10:30:44\nCache entry expiration time: 05/06/21 12:00:44\nInitgroups expiration time: Expired\nCached in InfoPipe: No\n'.find
___________________ test_user_show_basic_fqname_insensitive ____________________
Traceback (most recent call last):
File "/shared/sssd/src/tests/intg/test_sssctl.py", line 284, in test_user_show_basic_fqname_insensitive
assert output.find("Initgroups expiration time: Initgroups were not yet "
AssertionError: assert -1 != -1
+ where -1 = <built-in method find of str object at 0x7f9d65e46e00>('Initgroups expiration time: Initgroups were not yet performed')
+ where <built-in method find of str object at 0x7f9d65e46e00> = 'Name: user1@LDAP\nCache entry creation date: 05/06/21 10:30:46\nCache entry last update time: 05/06/21 10:30:46\nCache entry expiration time: 05/06/21 12:00:46\nInitgroups expiration time: Expired\nCached in InfoPipe: No\n'.find
```
"""
See the full comment at https://github.com/SSSD/sssd/pull/5597#issuecomment-834321019
2 years, 11 months
[sssd PR#5597][comment] sss_cache: reset original timestamp and USN
by elkoniu
URL: https://github.com/SSSD/sssd/pull/5597
Title: #5597: sss_cache: reset original timestamp and USN
elkoniu commented:
"""
Test environment:
- client machine
- LDAP server providing `user-1`
Test script:
```
#!/bin/bash
echo "RESTART SSSD ====================================================================="
systemctl stop sssd; sss_cache -E; rm -rf /var/lib/sss/db/*; rm -rf /var/log/sssd/*.log; systemctl start sssd
echo "FETCH USER ---------------------------------------------------------------------"
id user-1
echo "FETCH GROUP ---------------------------------------------------------------------"
getent group group-1
echo "USER TIMESTAMP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP TIMESTAMP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "USER CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "CLEAR CACHE ---------------------------------------------------------------------"
sss_cache -E
echo "USER TIMESTAMP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP TIMESTAMP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "USER CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP CACHE ---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
```
Vanila SSSD result:
```RESTART SSSD =====================================================================
FETCH USER ---------------------------------------------------------------------
uid=10001(user-1) gid=10001(user-1) groups=10001(user-1),20002(group-2),20001(group-1)
FETCH GROUP ---------------------------------------------------------------------
group-1:*:20001:user-1
USER TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393487
lastUpdate: 1620388087
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
initgrExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393487
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393487
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393487
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388087
dataExpireTimestamp: 1620393487
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
initgrExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1620393487
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388087
dataExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1620393487
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
CLEAR CACHE ---------------------------------------------------------------------
USER TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
initgrExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388087
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
initgrExpireTimestamp: 1620393487
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388087
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
```
SSSD with this PR included result:
```
RESTART SSSD =====================================================================
FETCH USER ---------------------------------------------------------------------
uid=10001(user-1) gid=10001(user-1) groups=10001(user-1),20002(group-2),20001(group-1)
FETCH GROUP ---------------------------------------------------------------------
group-1:*:20001:user-1
USER TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393598
lastUpdate: 1620388198
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
initgrExpireTimestamp: 1620393598
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393598
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393598
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393598
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388198
dataExpireTimestamp: 1620393598
initgrExpireTimestamp: 0
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1620393598
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388198
dataExpireTimestamp: 1620393598
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1620393598
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
CLEAR CACHE ---------------------------------------------------------------------
USER TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: user
dataExpireTimestamp: 1
initgrExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388198
initgrExpireTimestamp: 0
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388198
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
```
"""
See the full comment at https://github.com/SSSD/sssd/pull/5597#issuecomment-834227538
2 years, 11 months