https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sssd-cache.html

Thank you very much for taking the time to report this issue, Stuart.

Hi Stuart,

Based on comment 5, I have updated the relevant part of the section so that
it reads as follows:

  Most commonly, this is used to clear the cache and update all records:

    [root@server ~]# sss_cache -E

  The sss_cache command can also clear all cached entries for a particular
  domain:

    [root@server ~]# sss_cache -Ed LDAP1

  If the administrator knows that a specific record (user, group, or
  netgroup) has been updated, then sss_cache can purge the records for that
  specific account and leave the rest of the cache intact:

    [root@server ~]# sss_cache -u jsmith

I have also updated table 12.12 with the list of commonly used sss_cache
options and added the following entry:

  Table 12.12. Common sss_cache Options
  +----------------+---------------+--------------------------------------+
  | Short Argument | Long Argument | Description                          |
  +----------------+---------------+--------------------------------------+
  | -E             | --everything  | Invalidates all cached entries with  |
  |                |               | the exception of sudo rules.         |
  +----------------+---------------+--------------------------------------+

When you have a chance, could you please share it with the customer and
verify that the fix resolves their issue? In addition, please let me know
if there is anything else they would like me to add or change.

Thank you,
Jaromir