System Security Services Daemon (SSSD) - This project provides a set of daemons to manage access to remote directories and authentication mechanisms, it provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for FreeIPA, LDAP, & Active Directory.
Questions tagged [sssd]
353 questions
0
votes
1 answer
Login in Active Directory Domain (Samba 4) and mount -t cifs on debian
I've configured Samba 4 with bind and kerberos to work as an Active Directory authentication server. I've also configured "home share" so I can login to any Windows machine in my Domain and work with my files.
In addition I want to access my files…
ghi
- 101
0
votes
1 answer
Windows ACE Does Not Modify Unix ACL
Using a CentOS 7 Samba 4 file server, I am not able to modify "Security" permissions on a directory from the standard windows directory properties dialog.
I used realmd to join the CentOS VM to the windows domain, and am successfully able to log-in…
Joebocop
- 101
- 1
0
votes
0 answers
Users need several tries to SSH to a system
It is taking several attempts for users to SSH to several 64-bit Ubuntu machines which are using sssd to authenticate.
The following will happen from 0-6 times in a row before the user is allowed to log in:
ssh…
D34DM347
- 1,471
- 2
- 19
- 32
0
votes
0 answers
sudoers file not working
I cannot for the life of me figure out why the sudoers file is not working. Anytime a user tries to login and elevate, they are give the error is not in the sudoers file. This incident will be reported
The sudoers file itself does not seem…
user2104891
- 135
- 2
- 12
0
votes
2 answers
/var/log/secure reporting false positives
I have my CentOS 6 system configured to use sssd with ldap provider. I am able to login and use sudo, however /var/log/secure always reports authentication failure:
Sep 18 07:09:52 serverA sudo: pam_unix(sudo:auth): authentication failure;…
Python Novice
- 351
- 1
- 5
- 13
0
votes
1 answer
Creating AD SPNs with realmd/sssd on Cent7
Is it possible to use the system tools provided by realmd/sssd on a CentOS7 system to create and write out service principals for Apache and other servers? Or are we still reliant on other tools, like samba-tool and setspn.exe?
nicotine
- 101
0
votes
1 answer
how to translate an Active Directory group into a NIS netgroup?
The goal is to be able to add
+ : @DL-MyCompany-MyTeam : ALL
to /etc/security/access.conf and have it work as expected. This is my sssd.conf:
[domain/default]
cache_credentials = True
[sssd]
config_file_version = 2
services = nss, pam
domains =…
rone
- 13
- 2
- 6
0
votes
1 answer
ubuntu 12.04 sssd sudo not working
This is for Ubuntu 12.04.5 LTS
I am trying to implement SSSD as a client and everything works all right BUT SUDO
I cannot see anything happening in the sssd_sudo.log file at all but the usual file refresh
Installed versions:
sudo-ldap : Version:…
user2835733
- 1
- 1
0
votes
1 answer
sssd can't save user. Missing uid
I am trying to sync my Debian server using sssd.
When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i was under the clear impression what i didn't need…
Martin Nielsen
- 73
- 3
- 12
0
votes
1 answer
389-ds and openldap client setup
I am working towards a proof concept:
I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading)
I can see the port 636 is listening on the centos server
Now, i need to know what do i do to setup…
Jenefa
- 1
- 1
0
votes
1 answer
Can sssd-ldap authenticate non-posix users?
I am migrating a sealed MSA from using pam_ldap to pam_sss (sssd-ldap). However, pam_sss seems to have having trouble authenticating users without uidNumbers. I had thought changing ldap_user_object_class from posixAccount to top would fix this,…
84104
- 12,905
- 6
- 45
- 76
0
votes
1 answer
restrict ssh access to host using sssd and LDAP
I need to restrict ssh access to hosts based on the user's LDAP group membership. I want to do this using sssd's ldap_access_filter feature. Here's my sssd.conf file:
[sssd]
config_file_version = 2
services = nss, pam
domains =…
mr.zog
- 923
- 3
- 20
- 39
0
votes
1 answer
CentOS/Redhat: Systemwide aliases when logging in through LDAP/sssd
I've asked this question in the Centos Support forum, but we didn't found a solution for it (https://www.centos.org/forums/viewtopic.php?f=13&t=46101#p196728)
When logging in through LDAP/sssd, we didn't found a way to set up system-wide aliases for…
Noxx
- 111
- 1
- 3
0
votes
1 answer
Can't login with KDM and SSSD but works fine from console
I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically:
Jan 9 10:29:11 adams20420 sssd[be[default]]: Failed to set…
Drakkainen
- 123
- 3
- 9
0
votes
0 answers
Samba Server needs to have AD authentication
My Linux server is connected to AD via Bind DN and password (without domain joining). It is using sssd for authentication.
I am able to ssh and login without any issue. I have a proper setup of uid and guid, etc. .. There is no issue with logging…
vivek
- 11