SSS_SEED(8)

📦
version 2.13.1 · 21 versions
, in fedora 43, fedora 44

💖 sss_seed — seed the SSSD cache with a user 💖

okay bestie, welcome to SSS_SEED(8), part of the SSSD Manual pages ✨ this one's short, sweet, and lowkey powerful.

✨ NAME ✨

sss_seed — seed the SSSD cache with a user 🌱

✨ SYNOPSIS ✨

sss_seed [options] -D DOMAIN -n USER

✨ DESCRIPTION ✨

so like. sss_seed seeds the SSSD cache with a user entry and a temporary password. that's the whole vibe. 🌱🔑

and if a user entry is already sitting in the SSSD cache? no problem, girlboss — the entry just gets updated with the temporary password. it's giving "refresh, not reset" 💅

✨ OPTIONS ✨

  • -D, --domain DOMAIN — drop the name of the domain the user is a member of 🏠. this domain is also what gets used to retrieve user info. it must be configured in sssd.conf, and this option must be provided — no domain, no service, periodt. ⚠️ also important: info retrieved from the domain overrides whatever you passed in the other options. domain said it, that's canon.
  • -n, --username USER — the username of the entry you're creating or modifying in the cache. this one is required, fr fr. 🫶
  • -u, --uid UID — set the UID of the user to UID. 🆔
  • -g, --gid GID — set the GID of the user to GID. 🆔
  • -c, --gecos COMMENT — any text string describing the user. usually used as the field for the user's full name 📛✨
  • -h, --home HOME_DIR — set the home directory of the user to HOME_DIR 🏡
  • -s, --shell SHELL — set the login shell of the user to SHELL 🐚 (literally a shell, the pun wrote itself)
  • -i, --interactive — interactive mode for entering user information ✍️. it will only prompt for info that wasn't already given in the options or pulled from the domain. no redundant questions, we respect your time 💅
  • -p, --password-file PASS_FILE — specify the file to read the user's password from 📄🔐 (if you don't specify it, the password gets prompted for)
  • -?, --help — display the help message and exit. bye bestie 👋

✨ NOTES ✨

⚠️ the length of the password — or the size of the file you gave with the -p / --password-file option — must be less than or equal to PASS_MAX bytes. on systems with no globally-defined PASS_MAX value, that's 64 bytes. don't come crying to me when your 200-char banger gets rejected, okay? 😭

✨ SEE ALSO ✨

sssd(8), sssd.conf(5), sssd-ldap(5), sssd-ldap-attributes(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-idp(5), sssd-sudo(5), sssd-session-recording(5), sss_cache(8), sss_debuglevel(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(1), sss_ssh_knownhosts(1), sssd-ifp(5), pam_sss(8). sss_rpcidmapd(5) sssd-systemtap(5)

like... the whole friend group showed up to the party 🎉 read them all, iykyk.

✨ AUTHORS ✨

the SSSD upstream — https://github.com/SSSD/sssd/ 👑

k that's the whole page bestie, go seed something iconic 🌸

sign-off tea ☕: this was SSSD, dated 07/08/2026, for SSS_SEED(8) — mwah, take care of her 💖🎀🦋

📦 where this page comes from