-
In sssd.conf.j2 it uses domain.name for realm. However, it can be different. For instance, for some search_base you want to apply different parameters (ex : different override_homedir)
Possible sol…
Tuxem updated
3 years ago
-
gdm and kdm have support to authenticate using Active Directory accounts using winbind [1] from Samba. sddm doesn't support authenticating with domains. Also IPA [2] domains should be supported if sss…
-
Currently it is not possible to cross compile gssproxy. This is due to two autoconf macros.
1. In external/dinglibs.m4 AC_RUN_IFELSE is used without cross compile action, leading to error: cannot ru…
-
### systemd version the issue has been seen with
256.1
### Used distribution
ArchLinux
### Linux kernel version used
6.9.7
### CPU architectures issue was seen on
x86_64
### Component
systemd…
-
Hi, realized that EL7 comes with its own init script at /usr/lib/systemd/system/sssd.service after performing yum install sssd
(Tested on CentOS 7)
Should this task be omitted for EL7?
hgtok updated
4 years ago
-
This is similar to issue #5589. sss_override shells are completely ignored if an override_shell is specified. The behavior of sssd is now inconsistent: sss_override homedir takes precedence over sssd.…
-
Hello,
I am wondering if it would be possible to extend mod_auth_gssapi abilities to decode Kerberos PAC and allow finer grained access control based on groups the authenticated user is member of.
…
-
Hello all.
I have to interface with AD via ldap backend (can not join: it makes large redeploys quite problematic, having to give my own pass on every machine).
Out of the many domains in the AD f…
NdK73 updated
7 months ago
-
I couldn't find a fitting issue or documentation. Hope I'm not overlooking something basic.
Problem is when I do
`getent group foo`
sssd tries to search for cn=foo in `ou=users,...`.
Our ldap does…
-
I am attempting to connect MacOS directly to Authentik using the LDAP interface, but I have been unable to get it working so far. I have already successfully set up an SSSD connection, confirming that…