🟠 High   ⏱ 5–30 min  Last verified: 20 May 2026
Affected versions: SUSE Linux Enterprise Server 15

📖 ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

Domain users cannot log in even with correct credentials; `getent passwd ` returns nothing.

Environment & Reproduction

Common after SSSD upgrade, abrupt power loss, or moving between LDAP backends.

Root Cause Analysis

LDB cache files in `/var/lib/sss/db` are corrupted or out of sync with the directory server.

Quick Triage

Check `sssctl domain-list` and review `/var/log/sssd/`.

Step-by-Step Diagnosis

Inspect SSSD logs at debug_level 9 temporarily and look for `ldb_modify failed`.

Illustrative mockup for sles-15 — ldap_sssd-broken-cache_terminal
Terminal diagnostics for SSSD cache corruption breaks LDAP logins on SLES 15 — Illustrative mockup — Progressive Robot

Solution – Primary Fix

Stop sssd, remove `/var/lib/sss/db/*` and `/var/lib/sss/mc/*`, and restart sssd.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Illustrative mockup for sles-15 — ldap_sssd-broken-cache_logs
Logs and evidence for SSSD cache corruption breaks LDAP logins on SLES 15 — Illustrative mockup — Progressive Robot

Solution – Alternative Approaches

Reset sssd config to defaults and rejoin the realm via `realm join`.

Verification & Acceptance Criteria

User lookups, group membership, and SSH logins work for domain users.

Rollback Plan

Restore SSSD cache backups if they exist and config rollback is required.

Prevention & Hardening

Automate SSSD configuration via Salt and monitor cache health.

Pairs with `[sssd[be]] backend is offline` repeated messages.

Related tutorial: View the step-by-step tutorial for sles-15.

View all sles-15 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

SUSE SSSD troubleshooting and realm join documentation.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.