[SSSD-users] sssd with ad backend, pam problems
Stefan Schäfer
ml at fsproductions.de
Thu Aug 28 15:20:33 UTC 2014
Am 28.08.2014 17:11, schrieb steve:
> On Thu, 2014-08-28 at 16:56 +0200, Stefan Schäfer wrote:
> .
>> Any Idea how to get this working?
>>
> We think your stack is wrong. Here is one which works:
>
> auth sufficient pam_unix2.so
> auth required pam_sss.so use_first_pass
> account requisite pam_unix2.so
> account sufficient pam_localuser.so
> account required pam_sss.so use_first_pass
>
> Do you have the order right?
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
PAM works. The problem was caused by a bug in sssd 1.12.
"ad_gpo_access_control = disabled" solved the problem.
Stefan
--
www.invis-server.org
Stefan Schäfer
Ludwigstr. 1-3
63679 Schotten
More information about the sssd-users
mailing list