On 9 May 2018, at 11:30, JOHE (John Hearns) JOHE@novozymes.com wrote:

I know I could look this one up in the docs somewhere... If I have a Linux workstation which is using AD for the authentication provider. If I change my password using a Windows machine, what then happens when I log into Linux if the Linux machine has cached my credentials?

SSSD only ever authenticates against the cached credentials if the authentication server (AD DC here) is not reachable. If it is reachable, the new password would be used and cached in place of the old password.