On Thu, Nov 14, 2019 at 1:30 PM Trevor Vaughan <tvaughan@onyxpoint.com> wrote:
Ilya,

Could you link to the specific sections please?

In my opinion, SSSD should be completely removed if not utilized and the LOCAL provider should never be configured since it allows you to effectively hide accounts from standard scanning utilities.

I believe that the local provider is no longer built and delivered and is considered deprecated as of 2 years ago.
 

If you're using LDAP, it completely makes sense.