[SSSD-users] use certificates to bind to the LDAP server
Hello
we would like to not have encrypted or hashed passwords (which can be easily
reverse-engineered ) in the sssd.conf config file
we would like to bind to the ldap using client certificates as it is suggested in the
sss_obfuscated man page shipped with sssd-tools package
but I do not find any referenced to replace the ldap_default_authtok setting by a
certificate authentication? is that done with pam-ldap? or how it can be achieved. I do
not find any documentation. we really do not like to have the cleartext password in a
config file
is this possible with sssd ?
regards