[SSSD-users] root login with domain passwd

Jakub Hrozek jhrozek at redhat.com
Thu Sep 25 14:55:26 UTC 2014


On Thu, Sep 25, 2014 at 03:46:14PM +0200, Joakim Tjernlund wrote:
> Still, I don't see how the above somehow documents sssd's
> "no root login whatsoever" policy. The docs actually hints the
> opposite:
> filter_users, filter_groups (string) 
> Exclude certain users from being fetched from the sss NSS database. This 
> is particularly useful for system accounts. This option can also be set 
> per-domain or include fully-qualified names to filter only users from the 
> particular domain. 
> Default: root 
> 
> This make me think I only have to add an empty filter_users to allow root 
> 
>     Jocke

You have a point about documenting us dropping root requests. Can you
open a ticket upstream?


More information about the sssd-users mailing list