On Tue, May 18, 2021 at 03:06:39PM +0200, Sumit Bose via FreeIPA-users wrote:
Am Tue, May 18, 2021 at 11:44:57AM +0100 schrieb Dominik Vogt via
FreeIPA-users:
> Using freeipa from RHEL8.1, we need to set up the ipa-clients in a
> way that login is only possible if the ipa-server can be
> contacted. Local logi from the cache must be impossible. Is
> there a way to achieve this?
Hi,
as long as it is only about password authentication you can set
'cache_credentials = False', see man sssd.conf for details.
Thanks; I'll check with the customer if that is good enough.
Ciao
Dominik ^_^ ^_^
--
Dominik Vogt