Rick Stevens wrote: > passwd: files ldap > shadow: files ldap > group: files ldap That would be wrong for sssd. If he used system-config-authentication, his nsswitch.conf should read: passwd: files sss shadow: files sss group: files sss