You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org

Difference between revisions of "Portal:Cloud VPS/Admin/Runbooks/Refresh sssd caches"

From Wikitech-static
Jump to navigation Jump to search
imported>Bstorm
(fix formatting a bit)
 
imported>Andrew Bogott
 
Line 12: Line 12:
# Run <code>sudo -i sss_cache -E</code> to invalidate all caches. {{Topic|Requires admin permissions|#fc3}}
# Run <code>sudo -i sss_cache -E</code> to invalidate all caches. {{Topic|Requires admin permissions|#fc3}}


That doesn't always work -- in extreme cases you might also need to actively delete the cache files.
<syntaxhighlight lang="bash">
# systemctl stop sssd
# rm -rf /var/lib/sss/db/*
# systemctl restart sssd
</syntaxhighlight>


=== Support contacts ===
=== Support contacts ===


{{:Help:Cloud Services communication}}
{{:Help:Cloud Services communication}}

Latest revision as of 16:09, 29 July 2021

The procedures in this runbook require admin permissions to complete.

How to clear sssd caches (hosts, groups, etc).

Overview

If DNS (or an LDAP change) needs a quick update on a Cloud VPS VM that runs sssd, sometimes waiting for the cache to expire is not something you want to do for whatever reason. This applies if the host is not running the nscd or a similar OTHER cache for this kind of information. If you are running nscd, you'll have to clear that instead and/or as well (eg. nscd -i hosts). Anyone operating a Cloud VPS instance with sudo permissions can accomplish this.

Fixing

  1. Make sure the Debian package sssd-tools is installed. If it isn't on this VM, run sudo apt-get install sssd-tools Requires admin permissions
  2. Run sudo -i sss_cache -E to invalidate all caches. Requires admin permissions

That doesn't always work -- in extreme cases you might also need to actively delete the cache files.

# systemctl stop sssd
# rm -rf /var/lib/sss/db/*
# systemctl restart sssd

Support contacts

Communication and support

We communicate and provide support through several primary channels. Please reach out with questions and to join the conversation.

Communicate with us
Connect Best for
Phabricator Workboard #Cloud-Services Task tracking and bug reporting
IRC Channel #wikimedia-cloud connect
Telegram bridge
mattermost bridge
General discussion and support
Mailing List cloud@ Information about ongoing initiatives, general discussion and support
Announcement emails cloud-announce@ Information about critical changes (all messages mirrored to cloud@)
News wiki page News Information about major near-term plans
Cloud Services Blog Clouds & Unicorns Learning more details about some of our work
Wikimedia Technical Blog techblog.wikimedia.org News and stories from the Wikimedia technical movement