search

larsks / blog.oddbit.com

3 stars 0 forks source link

post/2015-07-16-mapping-local-users-to-kerbero/ #23

Open utterances-bot opened 2 years ago

utterances-bot commented 2 years ago

Mapping local users to Kerberos principals with SSSD · The Odd Bit

I work for an organization that follows the common model of assigning people systematically generated user ids. Like most technically inclined employees of this organization, I have local accounts on my workstation that don’t bear any relation to the generated account ids. For the most part this isn’t a problem, except that our organization uses Kerberos to authenticate access to a variety of resources (such as the mailserver and a variety of web applications).

https://blog.oddbit.com/post/2015-07-16-mapping-local-users-to-kerbero/

atol71 commented 2 years ago

Easier with: [domain/files] id_provider = files auth_provider = krb5

Should do the trick.

atol71 commented 2 years ago

and: [sssd] enable_files_domain (boolean) When this option is enabled, SSSD prepends an implicit domain with “id_provider=files” before any explicitly configured domains.

       Default: false
Itsuka1984 commented 2 months ago

hi,Sir,I am using archLinux, but this method does not work！！ id_provider = files Cannot retrieve domain user information using getent passwd