I tried setting up a domain that uses files for the account id but to use our active directory for authentication in sssd.conf. But when I fire up the sssd daemon, it reports that it is using files for the auth_provider. Is this setup possible? I know I can add the pam_krb5 directly into the pam stack to get what I need. I thought I'd try to do this within the pam_sss module framework.
On 10 Oct 2018, at 21:11, Ken Teh teh@anl.gov wrote:
I tried setting up a domain that uses files for the account id but to use our active directory for authentication in sssd.conf. But when I fire up the sssd daemon, it reports that it is using files for the auth_provider. Is this setup possible? I know I can add the pam_krb5 directly into the pam stack to get what I need. I thought I'd try to do this within the pam_sss module framework.
How does your config look like?
You probably want:
id_provider=files auth_provider=krb5
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o...
sssd-users@lists.fedorahosted.org
-
Jakub Hrozek -
Ken Teh