Re: [SSSD] using ldb-tools to modify the cache

[Stephen Gallagher]

On Mon, 2011-08-08 at 15:50 +0100, Michael Gliwinski wrote:
>  Hello all,
>  
>  Is it safe to use ldbmodify / ldbdel to modify the LDB cache in 
>  /var/lib/sssd/db/ ?  Does the daemon need to be stopped?
>   
It should be safe to do even while the daemon is running.

>  Obviously this is only for debugging, etc.  I'm currently trying
> to track down 
>  a weird issue where SSSD is losing track of members of an LDAP group (i.e. all 
>  member attribute values are OK in cache but only a subset or none of memberuid 
>  values).  I wanted to expire an entry by either deleting it or resetting 
>  dataExpireTimestamp. 

SSSD 1.6.0 now includes a tool for this: sss_cache. It can expire one
entry, all entries of a type (users, groups, netgroups) or all entries
of all types.