On Tue, Feb 25, 2020 at 11:17:17AM +0100, Ronald Wimmer via FreeIPA-users wrote:
> If SSSD has cache_credentials set to True it will take some time until
> changes become visible on an IPA client. When I change sudo permissions for
> a certain user I usually want to changes to be effective immediately. Does
> this imply setting cache_credentials to False or what are best practices
> here?
Hi,
'cache_credentials' only control is the credentials given by the user,
typically this is a password, is stored in the cache in a hashed
version.
To invalidate the sudo rules on a single host you can call
sss_cache -R
on this host.
HTH
bye,
Sumit
>
> Cheers,
> Ronald
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
