Przejdź do treści

LDAP – Sprawdzanie czy serwer widzi użytkownika

Ogólne Komendy

id <konto>
sudo -ll -U <konto>

# getent passwd <konto>
pi@chris:~ $ getent passwd pi
pi:x:1000:1002:,,,:/home/pi:/bin/bash
pi@chris:~ $

Problem z autoryzacja

Wyczyszczenie cache całkowicie # Used to clear the cache and update all records
sss_cache -E

Wyczyszczenie cache dla usera
sss_cache -u <konto>

systemctl restart sssd

Table 13.12. Common sss_cache Options

Short ArgumentLong ArgumentDescription
-E–everythingInvalidates all cached entries with the exception of sudo rules.
-d name–domain nameInvalidates cache entries for users, groups, and other entries only within the specified domain.
-G–groupsInvalidates all group records. If -g is also used, -G takes precedence and -g is ignored.
-g name–group nameInvalidates the cache entry for the specified group.
-N–netgroupsInvalidates cache entries for all netgroup cache records. If -n is also used, -N takes precedence and -n is ignored.
-n name–netgroup nameInvalidates the cache entry for the specified netgroup.
-U–usersInvalidates cache entries for all user records. If the -u option is also used, -U takes precedence and -u is ignored.
-u name–user nameInvalidates the cache entry for the specified user.

Dodaj komentarz

Twój adres email nie zostanie opublikowany. Wymagane pola są oznaczone *