Sssd

From Halfface
Jump to navigation Jump to search

clear cache

sss_cache -E

allow cert

ldap_tls_reqcert = never

debug ldap

ldap_library_debug_level = -1
  1. SSSD Status:
sssctl domain-list                # List available domains
sssctl domain-status $SSSD_DOMAIN # Print information about domain
sssctl user-checks $SSSD_USER     # Print information about a user and check authentication
  1. Information about cached content:
sssctl user-show $SSSD_USER       # Information about cached user
sssctl group-show $SSSD_USER      # Information about cached group
  1. Local data tools:
sssctl cache-expire       # Invalidate cached objects
  1. Log files tools:
sssctl logs-remove        # Remove existing SSSD log files
sssctl logs-fetch         # Archive SSSD log files in tarball
sssctl debug-level        # Change SSSD debug level
  1. Configuration files tools:
sssctl config-check       # Perform static analysis of SSSD configuration
  1. Certificate related tools:
sssctl cert-show          # Print information about the certificate
sssctl cert-map           # Show users mapped to the certificate