[SSSD-users] sssd and sudo ldap problems with IPA.

John Hodrien J.H.Hodrien at leeds.ac.uk
Fri Aug 29 08:00:23 UTC 2014


On Thu, 28 Aug 2014, Simo Sorce wrote:

>> auth_provider = krb5
>> chpass_provider = krb5
>> krb5_realm = IPA.EXAMPLE.TEST
>> krb5_server = ipa-host.ipa.example.test
>
> Without a keytab validation is not possible, that's not ideal.

Depending on your reason for not joining a machine to the domain, you're free
to share a single kerberos lookup credential via a keytab between multiple
machines, will still gives you the ability to validate.

jh


More information about the sssd-users mailing list