2
Enable both in sshd_config. For example:
AuthenticationMethods gssapi-with-mic publickey
Lack of a group delimiting comma is important, meaning or, not and.
1
Your olcAccess statements are too strict to allow the principal used by sssd to read that data that you want it to see.
The offending line is:
olcAccess: {4}to *
by dn="cn=admin,dc=lan,dc=xxxxxxx,dc=net" write
by dn="cn=sssdman,ou=manager,dc=lan,dc=xxxxxxx,dc=net" read
by self write
by anonymous auth
by * none
You probably want something like:
...
Only top voted, non community-wiki answers of a minimum length are eligible
