After sssd upgrade, useradd and usermod fail to flush the sssd cache with "DB version too old for domain implicit_files!".

Solution Verified - Updated -

Issue

  • After sssd upgrade, useradd and usermod fail to flush the sssd cache with "DB version too old for domain implicit_files!".

  • Sample outputs of a sssd upgrade system from sssd-2.3.0-9.el8(RHEL8.3) to sssd-2.5.2-2.el8(RHEL8.5):

    # useradd testuser1
    [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.22], expected [0.23] for domain implicit_files!
    Higher version of database is expected!
    In order to upgrade the database, you must run SSSD.
    Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials.
    Could not open available domains
    useradd: sss_cache exited with status 70
    useradd: Failed to flush the sssd cache.
    [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.22], expected [0.23] for domain implicit_files!
    Higher version of database is expected!
    In order to upgrade the database, you must run SSSD.
    Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials.
    Could not open available domains
    useradd: sss_cache exited with status 70
    useradd: Failed to flush the sssd cache.
    
    # id testuser1
    uid=1003(testuser1) gid=1003(testuser1) groups=1003(testuser1)
    
    # usermod --comment test testuser1
    [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.22], expected [0.23] for domain implicit_files!
    Higher version of database is expected!
    In order to upgrade the database, you must run SSSD.
    Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials.
    Could not open available domains
    usermod: sss_cache exited with status 70
    usermod: Failed to flush the sssd cache.
    [sss_cache] [sysdb_domain_cache_connect] (0x0010): DB version too old [0.22], expected [0.23] for domain implicit_files!
    Higher version of database is expected!
    In order to upgrade the database, you must run SSSD.
    Removing cache files in /var/lib/sss/db should fix the issue, but note that removing cache files will also remove all of your cached credentials.
    Could not open available domains
    usermod: sss_cache exited with status 70
    usermod: Failed to flush the sssd cache.
    
    # getent passwd testuser1
    testuser1:x:1003:1003:test:/home/testuser1:/bin/bash
    

Environment

  • Red Hat Enterprise Linux 8
  • SSSD

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content