# SSSD Manual pages

sss_override 8
sss_override create local overrides of user and group attributes
`sss_override` COMMAND options

### DESCRIPTION

`sss_override` enables to create a client-side view and allows to change selected values of specific user and groups. This change takes effect only on local machine.

Overrides data are stored in the SSSD cache. If the cache is deleted, all local overrides are lost. Please note that after the first override is created using any of the following user-add, group-add, user-import or group-import command. SSSD needs to be restarted to take effect. sss_override prints message when a restart is required.

### AVAILABLE COMMANDS

Argument NAME is the name of original object in all commands. It is not possible to override uid or gid to 0.

`user-add` NAME `-n,--name` NAME `-u,--uid` UID `-g,--gid` GID `-h,--home` HOME `-s,--shell` SHELL `-c,--gecos` GECOS

  Override attributes of an user. Please be aware that calling this command will replace any previous override for the (NAMEd) user.

`user-del` NAME

  Remove user overrides. However be aware that overridden attributes might be returned from memory cache. Please see SSSD option memcache_timeout for more details.

`user-find` `-d,--domain` DOMAIN

  List all users with set overrides. If DOMAIN parameter is set, only users from the domain are listed.

`user-show` NAME

  Show user overrides.

`user-import` FILE

  Import user overrides from FILE. Data format is similar to standard passwd file. The format is:

  original_name:name:uid:gid:gecos:home:shell

  where original_name is original name of the user whose attributes should be overridden. The rest of fields correspond to new values. You can omit a value simply by leaving corresponding field empty.

  Examples:

  ckent:superman::::::

  ckent@krypton.com::501:501:Superman:/home/earth:/bin/bash

`user-export` FILE

  Export all overridden attributes and store them in FILE. See user-import for data format.

`group-add` NAME `-n,--name` NAME `-g,--gid` GID

  Override attributes of a group. Please be aware that calling this command will replace any previous override for the (NAMEd) group.

`group-del` NAME

  Remove group overrides. However be aware that overridden attributes might be returned from memory cache. Please see SSSD option memcache_timeout for more details.

`group-find` `-d,--domain` DOMAIN

  List all groups with set overrides. If DOMAIN parameter is set, only groups from the domain are listed.

`group-show` NAME

  Show group overrides.

`group-import` FILE

  Import group overrides from FILE. Data format is similar to standard group file. The format is:

  original_name:name:gid

  where original_name is original name of the group whose attributes should be overridden. The rest of fields correspond to new values. You can omit a value simply by leaving corresponding field empty.

  Examples:

  admins:administrators:

  Domain Users:Users:501

`group-export` FILE

  Export all overridden attributes and store them in FILE. See group-import for data format.

### COMMON OPTIONS

Those options are available with all commands.

`--debug` LEVEL