On Thu, Mar 17, 2016 at 05:06:15PM -0000, Josh England wrote:
UsePAM is set to 'yes', and the 'joebob' user does
exist in /etc/passwd.
There goes your problem, this user would then be handled by pam_unix,
not pam_sss..
If you want to use users in /etc/passwd with LDAP authentication then
you need to use id_provider=proxy pointed at files and auth_provider
pointed at LDAP.
However, this setup is almost never needed, SSSD cached identity data
from LDAP, so you can just rely on the cache..