URL: https://github.com/SSSD/sssd/pull/694
Title: #694: SSSCTL: user-show says that user is expired

pbrezina commented:
"""
This works well but there is one corner case that will print "Expired" instead 
of "Never". If you will run `sss_cache -U` to invalidate all users (or 
`sss_cache -u` to invalidate single user from files domain) it will set data 
expiration time to 1 which will get past your check.

We do not have anything like "never expire" for ldap objects (expiration time < 
current time means that the object is expired and needs to be updated, this 
apply for expiration time = 0 as well). This is special case for files provider 
therefore I'd rather check `sss_domain_info->provider == "files"` instead of 
the expiration time itself.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/694#issuecomment-439030260
_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org

Reply via email to