Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [sssd]

System Security Services Daemon (SSSD) - This project provides a set of daemons to manage access to remote directories and authentication mechanisms, it provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for FreeIPA, LDAP, & Active Directory.

1
vote
1answer
21 views

Run a Bash Script on New User Creation by SSSD

Users created on AD can login to Linux with a password. I would like to replace this password login with ssh-key. So far, I've made a custom attribute and placed the public key in it and able to fetch ...
0
votes
0answers
6 views

Can I disable dynamic dns update during “realm join”?

When (re-)joining an EL7 system to the AD domain, something somewhere issues a dynamic dns update for $FQDN. How can I suppress that? The sssd.conf itself is pre-populated with [domain/ad.example....
1
vote
0answers
19 views

SSSD - Server not found in kerberos database

I've been trying to setup SSSD on a CentOS 7 machine to join with a windows AD for user management. I've managed to get Kerberos working independently of this setup, using LDAPS as the transport ...
0
votes
0answers
8 views

mounting DFS filesystem with remote shares in it on Arch Linux

I have laptop joined to domain AAA. Have two DFS namespace servers which are also AD DC with Win Server 2012 R2. NAS is Synology server with CIFS enabled/domain joined. Servers: dc1.domain1.local - ...
1
vote
1answer
36 views

Kerberos delegation with Apache, SSSD and FreeIPA

Let me start from describing my real goal, because I am not sure that I am trying to solve it in a proper way =) I am simply trying to make my web application obtain Kerberos credentials on behalf of ...
2
votes
2answers
64 views

How to de-obfuscate sssd.conf password?

I have inherited a number of EC2 instances with Centos that authenticate users against AWS Directory Service through LDAP. Now I need to run some manual queries with ldapsearch using the same account ...
0
votes
1answer
57 views

How to install sssd in Alpine?

I want to install sssd in an Alpine-Linux container. I know that Alpine uses apk add to install packages but apk add sssd yields no results. Yet the package seems to exist: https://pkgs....
1
vote
1answer
74 views

How do I authenticate against ldap.google.com?

I've set up SSSD and openldap to successfully query ldaps://ldap.google.com. I can use ldapsearch to perform queries and can interact with the directory using both sssctl and getent. Unfortunately all ...
0
votes
0answers
41 views

AD Integration With LINUX (RHEL) using SSSD

I've integrated the AD with linux using sssd. And now i'm able to login to the linux machines using AD accounts. But, i've the following questions for which i'm unable to find the answers. Apart from ...
0
votes
1answer
43 views

SSSD : id don't display groups name subdomain (Child trust)

In dev environnement, with SSSD 1.16.2 (release 13.el7_6.5) on RHEL 7.6 SSSD is configured to request on mch.dev domain. trusted subdomain sub.mch.dev exist (Win2k16) On mch.dev, I have an user '...
1
vote
0answers
41 views

Authentification with other user than root using keyfile-authentification on ubuntu machine

I tried to add a user which is able to authentificate using the keyfile authentification method to authentificate on a linux ubuntu machine. I tried now 2 full days but I failed to set this up. Here ...
1
vote
1answer
33 views

SSSD with e-mail address LDAP usernames

I have a small SFTP server setup using SSSD to authenticate users via LDAP using SSH keys. This works completely fine for basic usernames (i.e "ausername") but I've been requested to make a change so ...
3
votes
1answer
117 views

Configuring Sudo using SSSD

Trying to Login to Linux systems using windows AD account. Configured successfully using SSSD. Used LDAP as Identity & Access Providers and Kerberos as the Authentication provider. I have done ...
0
votes
0answers
37 views

How does ssh logins with Kerberos authentication exactly work from every client while Kerberos uses mutual authentication model?

I have my system authentication managed with SSSD which uses Kerberos. As kerberos support mutual authentication model i.e., both client and server should support Kerberos, how exactly does SSH to ...
0
votes
0answers
75 views

SSSD authenticate against parent domain

Ubuntu 18.04 LTS, sssd 1.16.1 I have a Linux server that is joined to a AD child domain via 'realm': realm join dev.example.com I am able to authenticate with users in the dev.example.com domain (i....
0
votes
0answers
257 views

How to configure LDAP client by using SSSD for authentication on CentOS, local accounts for identity, ldap for authentication

I've installed sssd, openldap, openldap-clients. I want to use local accounts for identity information and ldap for authentication. I'm using proxy for id_provider and ldap for auth_provider. Here'...
0
votes
4answers
105 views

Get fullname by username using SSSD

The OS uses SSSD to authenticate users via LDAP. It has no X server running. I can run id <username> to get the uid of the user. And the users can login to the system and their full name is ...
3
votes
0answers
103 views

Is there any way to get an AD bound linux system to mount home directories from a Windows server?

We've been experimenting with integrating linux systems into what is largely a Windows domain, with a Windows-based Active Directory server. After considerable trial and error, we have successfully ...
2
votes
0answers
405 views

SSSD with LDAP users not able to resolve their own uid/gid names and others

I have a machine setup to authenticate users with an LDAP directory using sssd+nss+pam. At the current state any user in the directory is able to login by ssh, or with su in between user accounts, ...
1
vote
0answers
444 views

How to set up System Security Services Daemon(SSSD) to authenticate users against Azure Active Directory

I have set Azure Active Directory(AD) up and running along with Azure AD Domain Services in which a single domain with secure LDAP is configured. On a Linux server, I have tested whether it can ...
1
vote
1answer
59 views

Active Directory sssd not Updating DNS

I have been migrating my Vm lab over to AD to centralize the auth management and im having issue with the linux VM's (Debian 8) not updating DNS records. the clients are being joined with realmd and ...
0
votes
0answers
288 views

Restrict user login to Linux via group membership querying Active Directory

I need to restrict access to linux servers according to AD group membership. I already have Centos 7 servers joined to AD realm using sssd and have already configured sssd.conf in order to use ...
0
votes
1answer
391 views

SSSD AD Integration - Clarification on Computer to join AD

Objective Clarify Computer, Not User, when integrating a Linux box with a Windows Domain. Background Having confusion because most SSSD AD information focuses on User Authentication, however ...
1
vote
1answer
52 views

Authentication with SSSD

I'm currently working on a project in my internship at an organisation, and it is honestly a bit of challenge, so I hope you guys can help me out. Background: The organisation I'm working in has a ...
1
vote
1answer
421 views

SSSD: How to force users in different groups use different shells

I have an Active Directory working as id, access and auth provider for my CentOS 7 servers using sssd. I have been following this post in order to have users from different groups use different shells ...
1
vote
0answers
59 views

Graceful 'Access denied' message when SSH to a server protected with SSSD fails

I'm using SSSD on Ubuntu for authn/authz. This works great, but I am getting a "Server unexpectedly closed network connection" when I try to SSH to the box with an unauthorized user. I can log in ...
1
vote
1answer
96 views

Debian: Problems authenticating to ad

Our Debian server somehow got disconnected from AD, and I am trying to get it back. I have tried different methods. The one that seems to have worked best is realm. Atleast it says that it has ...
0
votes
2answers
247 views

How can I disable the password reset prompt at ssh login for expired password? (RHEL 6.9)

Environment: Red Hat Enterprise Linux Server release 6.9 (Santiago) LDAP provided by Oracle Directory Server running on Solaris How do I turn off the automatic change password prompt when a user ...
0
votes
1answer
92 views

Unable to add local user on system authenticating to ldap using sssd

Reference this original question that was closed: Can't add local user on system using ldap auth for samba I had the same problem. We are creating a jump host that has some local users, and the ...
0
votes
0answers
35 views

Active Directory and Linux users combination

I have been doing research on the internet for several days but I have not yet found the best way to proceed to meet these specific needs: I work in a company with about 1000 employees where my ...
0
votes
1answer
154 views

Error code 1055 from Windows 2012 server manager

there. I just installed Windows server 2012 on my VM, created an Active Directory, and promoted it to Domain Controller. I just followed the guide for how to create AD and DC, so I can not say that I ...
0
votes
1answer
167 views

Why does sssd break PTR records for AD-joined CentOS

I have an AD domain-joined CENTOS 7 box - call it centosbox. Whenever SSSD starts, it updates the DNS records, which is fine by me, except that it breaks the PTR records by making them point to just ...
0
votes
0answers
144 views

Sharing SSSD for Active Directory from host with LXC Container guests

We have a development server (vdev4), which hosts LXC containers for individual developers, e.g. vdev-jsmith, all running the same OS, Ubuntu 18.04 LTS. The host (vdev4) is joined to Active Directory ...
0
votes
0answers
945 views

Connection closed by UNKNOWN port 65535 when SSH using AD Creds on RHEL Machine

Recently I installed PAM & all the necessary packages needed to enable ssh authentication via AD on my RHEL 7.5 machines. When I try to SSH using "ssh user@domainname@hostname" it asks for my ...
1
vote
0answers
389 views

SFTP Access with Active Directory user

I'm trying to access through SFTP using an Active Directory user. I have a RH7.3 machine, configured with SSSD. Sshd_config has some parameters that allow some AD users to login throught ssh. Now I'...
0
votes
1answer
331 views

Authenticated with SSSD (LDAP) but use /etc/passwd after login

I have the following setting: I have users in two different domains from two different organizations (separated AD installations) with users user@DOMAIN and user@OTHERDOMAIN On the system, these ...
1
vote
0answers
17 views

Why does sssd query for all automountkeys when looking for a specific one?

I am attempting to convert autofs from using ldap maps to using sss maps. However, it appears that sssd wishes to query for all automount keys rather than just the specific one it needs. This is ...
1
vote
1answer
386 views

Unable to configure sssd for multiple domain authentication in same forest

I have machine that is joined to the Domain A and it is able to authenticate fine the users in that domain. The default domain realm in kerberos is the Domain A. However, I'm unable to authenticate ...
0
votes
2answers
182 views

docker permissions on `sssd.conf`

I know it is awfully specific, sssd.conf that is. But upon COPY (or ADD) sssd.conf I receive the same error: ERROR: Service 'samba_adc' failed to build: failed to copy files: failed to copy file: ...
1
vote
1answer
2k views

Samba 4 joined to AD: can access to shares using FQDN but not using IP or aliases

I installed a new Openmediavault 4 server which I joined to my Active Directory managed by two Samba 4 Domain Controllers. Specifications: Active Directory domain MY.AD.DOMAIN managed by two Samba 4 ...
1
vote
0answers
314 views

How to make authconfig-tui use sssd instead of nslcd?

I've read that redhat's going to deprecate nslcd, and sssd is the future. So, I was following a video that shows how to setup IPA clients using authconfig-tui. Yes, I'm aware that it's been deprecated,...
0
votes
2answers
482 views

Cant delete SSSD cached user

Im testing a FreeIPA integration. One of the scenarios I'm trying is taking the server offline and making tests with the client, but I am facing an issue. I have logged in on the client with a newly ...
1
vote
1answer
60 views

sssd prevent particular backend servers

Just came across an interesting problem using sssd where I was able to getent someuser@example.com but getent group somegroup@example.com was failing. Ended up finding out with adcli info example.com ...
2
votes
1answer
240 views

Failed authentication

I am newbie in this world and I need help. For the past weeks I have been trying to find the answer to my problem, but withour success. I am trying to authenticate my CentOS machine against Active ...
0
votes
1answer
163 views

Simple way to secure a local network from unauthorized internal access to resources

Imagine this simplified scenario: a small business has an owner, a bookkeeper, a part-time sysadmin and a few dozen employees; the company has an all-Linux LAN. (Most computers run Arch Linux.) No ...
0
votes
1answer
1k views

Automatic realm join during kickstart

I need help in automation of joining CentOS hosts to working samba AD server. I've used winbind succesfully with the following command in a script net ads join -U Administrator%Passwordhere but now ...
6
votes
1answer
774 views

PAM accepting any password for valid users

I just linked my Arch Linux workstation to the Samba AD I set up for our company. I tested it, and it worked, or so I thought. It accepted my password, created my homedir and everything, and logged me ...
1
vote
1answer
4k views

Can't log in to Ubuntu as domain user “no passwd entry for user” (SSSD, KRB5, Samba)`

I followed this guide to join my Ubuntu 14.04 server to my domain. I have everything working - the server joined AD fine, I can kinit just fine, and dynamic DNS is working great. However, when I log ...
2
votes
2answers
466 views

SSSD LDAP authentication using two different LDAP servers

I am trying to setup LDAP authentication using SSSD on CentOS 7. Is it possible to set up SSSD in a way that it uses two LDAP servers: one LDAP server is used just for authentification (basically ...
12
votes
1answer
529 views

NTP Service Auto-Discovery

Are there any methods I could use to provide auto-discovery for NTP? I recently moved to a new job that has a parent company that recently started providing Active Directory. I've been implementing ...