Sssd

clear cache

sss_cache -E

allow cert

ldap_tls_reqcert = never

debug ldap

ldap_library_debug_level = -1

1. SSSD Status:

sssctl domain-list                # List available domains
sssctl domain-status $SSSD_DOMAIN # Print information about domain
sssctl user-checks $SSSD_USER     # Print information about a user and check authentication

1. Information about cached content:

sssctl user-show $SSSD_USER       # Information about cached user
sssctl group-show $SSSD_USER      # Information about cached group

1. Local data tools:

sssctl cache-expire       # Invalidate cached objects

1. Log files tools:

sssctl logs-remove        # Remove existing SSSD log files
sssctl logs-fetch         # Archive SSSD log files in tarball
sssctl debug-level        # Change SSSD debug level

1. Configuration files tools:

sssctl config-check       # Perform static analysis of SSSD configuration

1. Certificate related tools:

sssctl cert-show          # Print information about the certificate
sssctl cert-map           # Show users mapped to the certificate