4 ms·
That exact scenario is covered by the concept of "cached credentials" in the case of SSSD. If your authentication services or down (or the box you're attempting
by hug 10y ago
That exact scenario is covered by the concept of "cached credentials" in the case of SSSD. If your authentication services or down (or the box you're attempting to log into is offline) there's a period in which you can log in using the last used password for your account.
Granted you only have the configurable cache time out in which to solve your problem, but that's usually on the matter of days. If your authentication infrastructure is down for longer than that you have bigger fish to fry.
- subway 10y agoCached credentials only save the day if the cache has been populated. Engineers should be logging in infrequently enough that cache is rarely populated.
- deathanatos 10y agoIs it not possible to force the cache to have a particular set of users (say, critical devops folks) always populated?