8

Quite confused over the difference between Linux Name Service Caching Daemon (NSCD) and System Security Service Daemon (SSSD). As far as I understand, both are used to cache authentication lookup information on the local machine, and still it seems both can be used on the same machine.

What are the differences between the two, and in which cases should I use both ?

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/usingnscd-sssd.html

  • 1
    nscd came from Solaris. sssd is RedHat's re-invention of nscd under NIH constraints. – Satō Katsura Aug 27 '17 at 5:32
10

The nscd is a daemon that provides a cache for the most common name service requests like passwd, group, hosts, service and netgroup.

sssd primarily provides daemons to manage access to remote directories and authentication mechanisms like LDAP, Kerberos, NIS, etc...so it is more about authentication and authorization. It does have its own caching mechanism e.g. for users and groups but there are some more. Consult the manpage of sssd.conf for further details.

As in the linked article explained, sssd and nscd should not be used at the same time as it can result in unexpected lookups. If you need nscd e.g. for caching hosts entry, which sssd does not cache, it is recommended to configure nscd only for hosts and rely on user, group, etc. caching on sssd.

I think the cases you need to run both services are very rare, since the hosts caching is the only entry that sssd does not cache.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.