[SSSD] sssd can't get shadow information from ldap
Jakub Hrozek
jhrozek at redhat.com
Fri Nov 18 12:23:42 UTC 2011
On Fri, Nov 18, 2011 at 01:55:13PM +0200, Aziz Sasmaz wrote:
> Hi,
> sssd can't get shadow info from ldap. When I type getent passwd it shows
> pass section as * not as "x"
> As passwd (5) ; If the encrypted password is set to an asterisk, the user
> will be unable to login using login.
> Can sssd get shadow information from ldap.
No, shadow maps are not supported and likely won't ever be. See
https://bugzilla.redhat.com/show_bug.cgi?id=751291#c4 for an
explanation, for example.
> Is it possible to cache
> authentication when we use ldap/shadow ?
When SSSD can reach the LDAP server, it always performs authentication
online, not from the cache.
Password caching for offline use is supported by specifying
"cache_credentials = True" in sssd.conf -- I see that your config file
uses that option, so offline logins should just work.
More information about the sssd-devel
mailing list