On (16/01/19 09:14), Maupertuis Philippe wrote:
>Hi
>I am trying to find out how th sssd cache is being populated.
>I couldn't find much about it so I did some tests.
>It seems that with enumerate = true, the cache holds all the information 
>needed as soon as sssd is started.
>With enumerate = false, the cache holds information about someone only after 
>his first connection.
>Is that right ?
>I would like to be sure that user's passwords are stored in the cache but 
>couldn't find any way to verify this
>With sssctl user-show  I can find if a user is in the cache but with no 
>details.
>With sssctl user-checks I get some information about the user but nothing 
>about the password.
>By examining directly the cache with ldbsearch I don't find any password 
>information either, only maybe shadowLastChange: with a number which I don't 
>understand.
>Is there any documentation about the cache management ?
>

Hashed password is cached only after successful authentication. It is not
rerieved by "getent passwd $user".

sssd cache is internal cache and should not be used directly by user.
May I know what do you want to achieve?

LS
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to