Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using sssd to authenticate and identify users from AD using Kerberos and LDAP, however, I have to add auth/session/account sufficient pam-sss.so to /etc/pam.d/common-* files even if I check SSS authentication in pam-auth-update. Is this a bug in the package or am I missing some crucial step?

share|improve this question

1 Answer 1

This sounds to me like you are on a Redhat based distro. I usually work with Debian based distros, where pam-auth-update does automatically configure the relevant files, and this e.g. adds a session optional pam_sss.so line. So I would say this sounds a little suspect.

However, sssd originates from the Redhat project, and I would be surprised if they had got it that wrong. Can you post some more details, please, like the distro and version you are using?

share|improve this answer
    
This is debian squeeze. –  Kimvais May 18 '11 at 12:34
    
Actually, this is a follow-up to your answer at serverfault.com/questions/268880/debian-6-0-ad-integration/… –  Kimvais May 18 '11 at 12:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.