Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [sssd]

SSSD System Security Services Daemon provides an NSS and PAM interface to remote authenticators such as LDAP, Kerberos, FreeIPA.

1
vote
2answers
1k views

getent passwd does not return AD users Centos 7 SSSD

I'm used to joining windows 2008 r2 AD with Krb5.conf/ldap.conf/smb.conf and pam.d/authconfig_ac and being able to list users with getent passwd but after joining a centos 7 system I can logon fine, ...
3
votes
1answer
218 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
3
votes
1answer
966 views

Get sudoers through LDAP (SUSE Linux Enterprise Server 12)

I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12. As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
3
votes
1answer
965 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...
2
votes
1answer
4k views

LDAP user does not exist when running 'su'

I'm attempting to set up LDAP authentication according to the instructions in Sander Van Vugt's RHCSA/RHCE book for RHEL7. In chapter 6 he explains that when using authconfig-tui the FORCELEGACY ...
2
votes
1answer
697 views

Login not chdir()ing to correct home directory (AD/realmd/sssd)

I'm forced (ugh) to join several linux machines to a domain. I'm currently using debian stable, and am joining the machines using a join script I wrote (at https://rbmj.github.io/join.sh for ...
2
votes
1answer
614 views

Utilizing Samba Shares Without using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
0
votes
1answer
202 views

About PAM authentication using sssd

there. I succeed to join Linux environment to Windows Server domain, using realm join command. (Thanks Roaima) From this Stack ticket. Now the next step seems to authenticate to Active Directory. So,...
0
votes
1answer
419 views

SSSD not authenticating to AD

I have a cluster of 23 machines. CentOS 6.7 They have been successfully authenticating to AD via SSSD for over a year. Unbeknownst to me, someone moved one computer out of the search base OU and ...
0
votes
1answer
1k views

Enable sssd caching and linux to honor that cache on CentOS 5

I wanted to enable sssd caching on CentOs and not to use nscd caching, because sssd itself is giving that option. However, authconfig is not giving the option for --enablecachecreds even on the ...
4
votes
0answers
1k views

Centos 7 AD authentication DataProvider is Offline

I have configured my Linux machine to use AD authentication. Sometimes few nodes are unable to login. The /var/log/sssd/sssd_nss.log log file reports the message below: Thu Sep 13 13:31:39 2018) [...
4
votes
0answers
5k views

sssd configuration with Active directory

I need to configure the sssd so that we can use Windows Active directory username to login to Redhat machine. I have below configuration file for sssd.conf file I get the following error in log. ...
3
votes
0answers
663 views

auto groups in CentOS 7 in Active Directory domain?

I am having an issue that might be mostly cosmetic but I've gotta keep the user complaints down. :) I have a set of servers running CentOS 7.4 and have the requirement to join the servers to an ...
2
votes
0answers
896 views

sssd not working over ldap_id_use_start_tls

Have a weird situation going on. Trying to setup sssd, but I am having issues when I set ldap_id_use_start_tls on sssd.conf. In sssd.conf I have the following config: [domain] ldap_id_use_start_tls =...
2
votes
0answers
295 views

Override local sudo defaults using sss or ldap

I'm trying to to configure an IPA domain to use the following sudo options for a specific command group: !authenticate !requiretty visiblepw Locally, the following defaults are set in /etc/sudoers: ...
2
votes
0answers
411 views

ldap 389 server with sssd client, cannot modify password

I setup the 389 ldap server on a fedora system. I can authenticate against the system, but I cannot update/modify a password neither as root nor as user. user root gets a "Password reset by root is ...
2
votes
0answers
5k views

How do I view multiple users groups using sssd?

SETUP OS = RHEL 6.4 Workstation System is part of an LDAP domain and was originally configured to authenticate using nscd. All recommended SSSD packages have been installed. [root@sssd_system]#...
2
votes
0answers
498 views

ACL for a binddn user for PAM?

I've installed 389-ds and created a user and a couple groups. I then configured authconfig on a client to use the LDAP instance to authenticate the user. I've logged in successfully as that user. All ...
1
vote
0answers
95 views

Alternative to autofs to mount CIFS folders in user home folders in multi-user environment

My use case seems very simple. I want to automount CIFS folder CIFS1 and CIFS2 which exist for all users on my fileserver in each user home during login on this multi-user 18.04 Ubuntu machine. So ...
1
vote
0answers
139 views

No user exists for uid 721001106 when running ssh command within SSH chroot directory

I am running debian 8 with SSSD authentication. The authentication works and ssh works fine. I have copied all libraries etc over to my SSH chrootdirectory and all my applications work except ssh ...
1
vote
0answers
16 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
1
vote
0answers
959 views

Samba can't fetch domain SID after joining AD domain

This is my scenario: I have a CentOS 7.5 server which must act as a file server and allow AD-integrated authentication for Samba access, without the need to create local users with smbpasswd. Samba ...
1
vote
0answers
39 views

About connecting to Active Directory from CentOS7

I've searched several videos on Youtube, articles in other Stack Exchange sites, and some blogs.. but I couldn't make this done yet.. My environment is Windows Server 2012 RC and CentOS7. 1. I ...
1
vote
0answers
483 views

Server: Using Active Directory Groups For Sudo Fails Unless Name of File in /etc/sudoers Matches The Name Of The AD Group

I work for an organization with many linux servers that we'd like to start authenticating with Active Directory. I have a proof-of-concept server set up on which I use SSSD and Kerberos to ...
1
vote
0answers
426 views

SSSD list allowed users only

We are using SSSD for authentication using LDAP. And I filter the user access using simple_allow_groups as follows: access_provider = simple simple_allow_groups = Computer Admins (Note: Computer ...
1
vote
0answers
1k views

Why is my IPA Client not recognizing AD Trusted users

I have installed an IPA Server, created a replica agreement and set up a one way trust to our AD Forest. The IPA servers have integrated DNS and are in their own dns zone. This works as expected, I am ...
1
vote
0answers
91 views

Cloning Machines joined to Domain using SSSD

We are using Amazon Web services and have a number of Debian boxes that are registered to our domain. I want to clone these boxes, change there hostname and rejoin them to the domain without impacting ...
1
vote
0answers
92 views

'Merging' Local Server and AD Accounts

I am investigating LDAP-bridge options, but have a hurdle to overcome: pre-existing local accounts. There are a large number of *nix servers (hundreds) with local accounts on them formatted in all ...
1
vote
0answers
157 views

SSSD server as centralized authentication

I have a linux server that successfully communicates with Windows Active Directory to get user logins, using SSSD. Everything works good. Now, I'd like to allow a second linux server to use those AD ...
1
vote
0answers
4k views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
0
votes
0answers
49 views

Add all users in AD-Group to the local wheel group

We have limited 'su' to users that are in the wheel group and are now looking to permit certain users that are in a particular AD-Group. The users that we want to permit to use the program 'su' are ...
0
votes
0answers
78 views

sudoer: AD domain group in sudoer file won´t work

My server is joined to AD domain, and I used SSSD and realm to do so. I can log fine to the server using SSH and my AD credentials. I wanted to allow my user to run sudo, so I added %MY_AD_GROUP ALL=(...
0
votes
0answers
137 views

Samba: share is not accessible for AD groups

I have a CentOS server joined to an ID domain with realm(8) using sssd(8). I don´t have winbind installed, though. I can log fine with AD domain users into this CentOS server. I set up samba shares in ...
0
votes
0answers
77 views

Freeipa client on debian 9 - Cannot find user error

EDIT 1: added solution, pam was faulty i'm trying to set up freeipa client on debian 9 client using this guide: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/...
0
votes
0answers
619 views

sssd: AD user cannot login in RHEL 7

I can switch to the mentioned domain user with su command from the server, but ssh login is failing. The user domain group is already added in sssd.conf file under "simple_allow_groups" The errors in ...
0
votes
0answers
258 views

mount a cifs share with kerberos on linux with a sssd/kcm kerberos client

As a non-root user I would like to mount a samba share on my Fedora Linux with kerberos (non-password). I have a kerberos client running (sssd with the kcm server for kerberos tickets). when i do a ...
0
votes
0answers
173 views

On starting sssd

there. At first, it says the daemon couldn't find the /etc/sssd/sssd.conf. So, I created this and, when executing sssd "systemctl start sssd.service", it shows the following errors. Jun 25 21:00:48 ...
0
votes
0answers
4k views

CentOS 7 SSSD AD with Samba Share

I followed this site's tutorial to install SSSD (without WinBind) to join a Windows Server 2008 domain. And it is a great success. Before that I was trying to use Zentyal to set up share folders but ...
0
votes
0answers
92 views

How Can I Set Up DNS Server on Virtual Network w/out Internet?

I'm trying to set up a virtual network populated with 4 CentOS 7 servers for testing purposes. I have successfully configured a Kerberos server and a secondary Kerberos server. However, when it ...