Oh lovely :-|.

Well, it seems to have been supplanted by the 'sssd-files' provider that pretty much does the same thing albeit without the handy management commands.

On Thu, Nov 14, 2019 at 3:57 PM Gabe Alford <redhatrises@gmail.com> wrote:
On Thu, Nov 14, 2019 at 1:30 PM Trevor Vaughan <tvaughan@onyxpoint.com> wrote:
Ilya,

Could you link to the specific sections please?

In my opinion, SSSD should be completely removed if not utilized and the LOCAL provider should never be configured since it allows you to effectively hide accounts from standard scanning utilities.

I believe that the local provider is no longer built and delivered and is considered deprecated as of 2 years ago.
 

If you're using LDAP, it completely makes sense.
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedorahosted.org


--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --