sssd and ldap config

Michael Cronenworth mike at cchtml.com
Wed Jun 9 15:48:39 UTC 2010


Nalin Dahyabhai wrote:
> Setting nsswitch.conf to "ldap" doesn't test sssd -- the source for that
> information should be listed as "sss" if you want to use sssd.

A fresh F13 install defaults to "files sss", so it is implied I was 
using it.

> The example sssd.conf doesn't look right to me -- the bits in there that
> mention Kerberos-specific (krb5*) settings don't fit at all since the
> auth_provider isn't set to Kerberos (krb5) and the client isn't being
> told to use Kerberos to authenticate to the directory server.  There
> aren't any of the TLS-related settings that sssd-ldap(5) details in
> there, either.

I'm not using Kerberos. I have it set to use LDAP for all authentication.

>
> If that doesn't point you in the right direction, you might want to ask
> on the sssd list.

Looks like I'm headed that way. Thanks.


More information about the users mailing list