[SSSD-users]Re: SSSD credential cache for offline authentication

[Sam Morris]

On 02/07/2024 12:02, seojeong kim wrote:
> /var/lib/sss/db/
>
> I try to use SSSD offline authentication.
> under /var/lib/sss/db/
>     cache_mydomain.ldb
>     ccache_mydomain.ldb
>     config.ldb
>     fast_ccache_mydomain.ldb
>     sssd.ldb
>     timestamps_mydomain.ldb
>
> SSSD offline authentication works with the cached credential and credential will be stored after the  last successful login.
> How can I  check if SSSD credential cached properly after the successful login?
> Which file should I check ?

List users in the cache with:

# ldbsearch -H /var/lib/sss/db/cache_mydomain.ldb -s one -b 
cn=users,cn=mydomain,cn=sysdb dn

View a user's cached password:

# ldbsearch -H /var/lib/sss/db/cache_mydomain.ldb -s base -b 
name=user@mydomain,cn=users,cn=mydomain,cn=sysdb cachedPassword