[Freeipa-users] Clients are reading AD info inconsistently

[Dmitri Pal]

On 03/25/2015 11:44 AM, Simo Sorce wrote:
> On Wed, 2015-03-25 at 14:46 +0000, Guertin, David S. wrote:
>> Follow-up: today I tried clearing the sssd cache and restarting sssd on all three clients, and all three lost their AD users:
>>
>> # rm -f /var/lib/sss/db/*
>> # service sssd restart
>> Stopping sssd:                                             [  OK  ]
>> Starting sssd:                                             [  OK  ]
>> # id 'MIDD\juser'
>> id: MIDD\juser: No such user
>>
>> David Guertin
>>
> This is normal, users are "loaded in" when they actually try to Log In.
>
> Simo.
>
Yes. The ability to look up AD users that never authenticated was added 
in 7.1 and 6.7 (i.e. SSSD 1.12)

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.