we have Active Directory authentication with SSSD on a CENTOS 7.5
Starting from today users are unable to log in. When they try, they get:
/usr/bin/id: cannot find name for group ID xxxxxxxxxx
I looked into /var/log/secure:
pam_sss(crond:session): Request to sssd failed. Public socket has wrong ownership or permissions.
Here's sssd.conf:
domains = xxxxxxxxx
config_file_version = 2
services = nss, pam
[domain/xxxxxxxx]
ad_domain = xxxxxxxx
krb5_realm = XXXXXXXXXX
realmd_tags = manages-system joined-with-samba
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
#use_fully_qualified_names = True
use_fully_qualified_names = False
#fallback_homedir = /home/%u@%d
fallback_homedir = /home/%u
access_provider = ad
On another machine, with exactly the same configuration, everything works.
No changes at all, lately.
Thanks for your help.
systemctl cat sssd-pam.socket
to find out where that is on your system.