Hello again, my offline authentication works, however, if I reboot while offline it no longer works and the cached password is removed from the cache db. I mean that ldbsearch no longer reveals a cached password for my user.

I use the passwd file as the ID provider and krb5 as the auth provider. 

[pam]

offline_credential_expiration = 0

[domain/EXAMPLE.COM]
cache_credentials=true
id_provider=files
auth_provider=krb5
krb5_server=srva.example.com
#krb5_kpasswd=srva.example.com
krb5_realm=EXAMPLE.COM
dns_discovery_domain=EXAMPLE.COM

Not sure why the cached entry for my user is removed from /var/lib/sss/db/cache_EXAMPLE.COM.ldb

I've been fighting with this for a while so any help would be appreciated.

Thank you


On Sun, Sep 17, 2023, 12:01 PM Techie <techchavez@gmail.com> wrote:
Hi

Trying to use cached creds with local users in the passwd file authenticating via kerberos.
I have id_provider set to files and auth_provider set to krb5(AD DC). Online authentication works fine however when I disconnect the network authentication fails. The computer is not joined to a domain, I am only leveraging the domain/realm for authentication purposes

Relevant entries
[pam]
offline_credentials_expiration = 7

[domain]
cache_credentials=true
account_cache_expiration=8
id_provider=files
auth_provider=krb5
krb5_server=srva.example.com
krb5_kpasswd=srva.example.com
krb5_realm=EXAMPLE.COM
dns_discovery_domain=EXAMPLE.COM
krb5_store_password_if_offline=true

Is this a supported configuration for offline logins with cached credentials?

Thanks