Clear SSSD Cache
If there's a record update in LDAP, clear the SSSD cache on the affected Linux machine:
sss_cache -E # Invalidate all cached entries sss_cache -u username # for specific user sss_cache -U # for all users sss_cache -g groupname # for specific group sss_cache -G # for all groups