Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using sssd to authenticate and identify users from AD using Kerberos and LDAP, however, I have to add auth/session/account sufficient to /etc/pam.d/common-* files even if I check SSS authentication in pam-auth-update. Is this a bug in the package or am I missing some crucial step?

share|improve this question

This sounds to me like you are on a Redhat based distro. I usually work with Debian based distros, where pam-auth-update does automatically configure the relevant files, and this e.g. adds a session optional line. So I would say this sounds a little suspect.

However, sssd originates from the Redhat project, and I would be surprised if they had got it that wrong. Can you post some more details, please, like the distro and version you are using?

share|improve this answer
This is debian squeeze. – Kimvais May 18 '11 at 12:34
Actually, this is a follow-up to your answer at… – Kimvais May 18 '11 at 12:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.