SSSD Manual pagessss_override8sss_overridecreate local overrides of user and group attributessss_overrideCOMMANDoptionsDESCRIPTIONsss_override enables to create a client-side
view and allows to change selected values of specific user
and groups. This change takes effect only on local machine.
Overrides data are stored in the SSSD cache. If the cache is deleted,
all local overrides are lost. Please note that after the first
override is created using any of the following
user-add, group-add,
user-import or
group-import command. SSSD needs to be
restarted to take effect.
sss_override prints message when a restart is
required.
AVAILABLE COMMANDS
Argument NAME is the name of original object
in all commands. It is not possible to override
uid or gid to 0.
NAME NAME UID GID HOME SHELL GECOS
BASE64 ENCODED CERTIFICATE
Override attributes of an user. Please be aware that
calling this command will replace any previous override
for the (NAMEd) user.
NAME
Remove user overrides. However be aware that overridden
attributes might be returned from memory cache. Please
see SSSD option memcache_timeout
for more details.
DOMAIN
List all users with set overrides.
If DOMAIN parameter is set,
only users from the domain are listed.
NAME
Show user overrides.
FILE
Import user overrides from FILE.
Data format is similar to standard passwd file.
The format is:
original_name:name:uid:gid:gecos:home:shell:base64_encoded_certificate
where original_name is original name of the user whose
attributes should be overridden. The rest of fields
correspond to new values. You can omit a value simply
by leaving corresponding field empty.
Examples:
ckent:superman::::::
ckent@krypton.com::501:501:Superman:/home/earth:/bin/bash:
FILE
Export all overridden attributes and store them in
FILE. See
user-import for data format.
NAME NAME GID
Override attributes of a group. Please be aware that
calling this command will replace any previous override
for the (NAMEd) group.
NAME
Remove group overrides. However be aware that overridden
attributes might be returned from memory cache. Please
see SSSD option memcache_timeout
for more details.
DOMAIN
List all groups with set overrides.
If DOMAIN parameter is set,
only groups from the domain are listed.
NAME
Show group overrides.
FILE
Import group overrides from FILE.
Data format is similar to standard group file.
The format is:
original_name:name:gid
where original_name is original name of the group whose
attributes should be overridden. The rest of fields
correspond to new values. You can omit a value simply
by leaving corresponding field empty.
Examples:
admins:administrators:
Domain Users:Users:501
FILE
Export all overridden attributes and store them in
FILE. See
group-import for data format.
COMMON OPTIONS
Those options are available with all commands.
LEVEL