On (01/05/18 22:52), Jakub Hrozek wrote:
On Tue, May 01, 2018 at 01:53:48PM +0200, cedric hottier wrote:
> Dear sssd users,
>
> I observe that at each sssd start, the credentials cache is cleared. Is it
> an expected behavior ?
> If yes, is there a parameter to make this caching permanent (or at least
> not erased at each sssd restart ).
> My issue is that If I reboot my laptop without connection to my KDC, I am
> not able to log due to [sysdb_cache_auth] cached credentials not available.
>
> here is my config : Debian testing / SSD version : 1.16.1
>
> /etc/sssd/sssd.conf :
> [sssd]
> services = nss, pam, ifp
> domains = ECCM.LAN
>
> [pam]
> pam_verbosity = 2
> offline_credentials_expiration = 0
>
> /etc/sssd/conf.d/01_ECCM_LAN.conf
> [domain/ECCM.LAN]
> debug_level = 10
> id_provider = files
I'm afraid this is a known bug with id_provider=files. I was looking
into fixing this last week, but I don't have a patch yet.
Here is an upstream ticket
https://pagure.io/SSSD/sssd/issue/3591
In the meantime, you can use:
id_provider=proxy
proxy_lib_name=files
I think that should work in the meantime..
That should work with 1.16.1.
Older versions might hit
https://pagure.io/SSSD/sssd/issue/3590
LS