On Mon, 2014-03-24 at 22:36 -0400, Mark London wrote:
Hi - We are running an LDAP server on a Windows box. We have a need
for our Linux clients to be able to quickly see
modifications we make to a user's account, i.e. adding a group to an account. The
only way that I've found to be able to
do this, is to set ldap_enumeration_refresh_timeout to a small amount of time. Is there
a better way to do this (that
uses less cpu)? Thanks. - Mark
Hi
sss_cache -UG
should get you there. If not and you get desperate, rm the files at:
/var/lib/sss/db/*
and restart.
Make sure that nscd is not running.
HTH
Steve