[SSSD-users] Check credentials cache expiration

Hi everyone Short: Is there a way to check how long the cached credentials of a specific user are still valid? Somewhat longer: When I'm offline and I log in with cached credentials, it says something like "Authenticated with cached credentials, your cached password will expire at: XYZ". Unfortunately, # sssctl user-show <wid> doesn't show this information... I've checked with the cache file in /var/lib/sss/db/cache_<domain>.ldb. The relevant field is probably the "lastOnlineAuth" field, or the "lastLogin" field. Is there a way to instruct SSSD to reveal those fields to a user process without doing a full authentication? Thanks & Regards --David Wittwer