SSSD credential cache for offline authentication

[seojeong kim]

/var/lib/sss/db/

I try to use SSSD offline authentication. 
under /var/lib/sss/db/
   cache_mydomain.ldb 
   ccache_mydomain.ldb 
   config.ldb
   fast_ccache_mydomain.ldb 
   sssd.ldb
   timestamps_mydomain.ldb

SSSD offline authentication works with the cached credential and credential will be stored after the  last successful login. 
How can I  check if SSSD credential cached properly after the successful login?  
Which file should I check ?

[Alejandro Lopez]

Hi,

You can check the presence of a user in the cache with:

# sssctl user-show <user>

HTH.

On Tue, Jul 2, 2024 at 1:02 PM seojeong kim 
wrote:
> /var/lib/sss/db/
>
> I try to use SSSD offline authentication.
> under /var/lib/sss/db/
>    cache_mydomain.ldb
>    ccache_mydomain.ldb
>    config.ldb
>    fast_ccache_mydomain.ldb
>    sssd.ldb
>    timestamps_mydomain.ldb
>
> SSSD offline authentication works with the cached credential and
> credential will be stored after the  last successful login.
> How can I  check if SSSD credential cached properly after the successful
> login?
> Which file should I check ?
> --
> _______________________________________________
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Sam Morris]

On 02/07/2024 12:02, seojeong kim wrote:
> /var/lib/sss/db/
>
> I try to use SSSD offline authentication.
> under /var/lib/sss/db/
>     cache_mydomain.ldb
>     ccache_mydomain.ldb
>     config.ldb
>     fast_ccache_mydomain.ldb
>     sssd.ldb
>     timestamps_mydomain.ldb
>
> SSSD offline authentication works with the cached credential and credential will be stored after the  last successful login.
> How can I  check if SSSD credential cached properly after the successful login?
> Which file should I check ?

List users in the cache with:

# ldbsearch -H /var/lib/sss/db/cache_mydomain.ldb -s one -b 
cn=users,cn=mydomain,cn=sysdb dn

View a user's cached password:

# ldbsearch -H /var/lib/sss/db/cache_mydomain.ldb -s base -b 
name=user@mydomain,cn=users,cn=mydomain,cn=sysdb cachedPassword