A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Enable both in sshd_config. For example: AuthenticationMethods gssapi-with-mic publickey Lack of a group delimiting comma is important, meaning or, not and.


Your olcAccess statements are too strict to allow the principal used by sssd to read that data that you want it to see. The offending line is: olcAccess: {4}to * by dn="cn=admin,dc=lan,dc=xxxxxxx,dc=net" write by dn="cn=sssdman,ou=manager,dc=lan,dc=xxxxxxx,dc=net" read by self write by anonymous auth by * none You probably want something like: ...

Only top voted, non community-wiki answers of a minimum length are eligible