People who code: we want your input. Take the Survey

Questions tagged [sssd]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Joining AD works, but how to appear in the winevent security log?

I've got a question relating to joining an AD using Ubuntu workstations. The connection, using sssd, sssd-ad, and adcli, works flawlessly. However, login events do not appear in the winevent security ...
0
votes
0answers
22 views

Handling AD password expiry with Freeradius (with PAM+SSSD+GoogleAuth)

I setup a Freeradius server (v3.0.21) for VPN connections to the office, using their AD credentials + Google AUTH token. I use SSSD for AD credential check and Google AUTH librairies for tokens. Linux ...
0
votes
0answers
20 views

Active Directory with Jetson Nano

I am trying to get my Jetson Nano 4gb to authenticate users via a trusted Active Directory. The network has two domains: the local domain (local.example.com), which the Jetson Nano is directly ...
0
votes
0answers
118 views

Ubuntu 21.04 - AD Integrated From Installer - Cannot use graphical login for AD user

I have a Samba4 AD running on my network (let's call it myhome.net) I have a user named aduser configured. I joined my domain from the installer, but when I first logged into the system with my local ...
0
votes
0answers
19 views

VDI - Failed to Start System Security Services Daemon

I am trying to up a VDI image from osboxes (Ubuntu 20.10 or 20.04) with oracle virtualbox (v. 6.1.18). The problem occurs when the Ubuntu is loading. (I posted an image pointing to the error.) I saw ...
1
vote
1answer
315 views

SSSD (LDAP) sudo password with ssh key based login

I'm trying to get an OpenLDAP server up and running a small set of servers. Some of the users naturally need root/sudo access. The OpenLDAP is setup to use ssh keys for login using https://github.com/...
0
votes
0answers
21 views

Mounting a Windows share in a Windows joined Ubuntu 18.04 system on login

So what I am trying to do in order to keep permissions on our file server secure is mount a windows share in a user's home directory on Linux which is joined to the windows domain using the user's ...
1
vote
1answer
80 views

Domain AD users aren't get discovered after adding Ubuntu under AD domain control

I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as sudo realm join -U Administrator win2016.local realm list show below output ...
0
votes
0answers
321 views

Ubuntu 18.04 and 20.04 SSSD with LDAPS not working

Due ADV 190023 I need to reconfigure my current working AD integrated Ubuntu servers (SSSD, Kerberos, LDAP) to use port 686 (LDAPS). Network team will be blocking port 389 in the near future. https://...
0
votes
0answers
59 views

Ubuntu mount SMB share. Authenticate using Windows Active Directory

So far I have been able to connect Windows, FreeNAS, and Ubuntu to the domain and everything is working. Configured on ubuntu using SSSD. Now the problem that I'm facing is that I can't find a way to ...
0
votes
0answers
21 views

SSH Reverse Tunnel keeps disconnecting (with activity)

I tried changing the Type=simple in the systemd service file as mentioned in SSH Reverse Tunnel keeps disconnecting with activity Still facing the same issue of disconnection. Also I made changes to /...
0
votes
0answers
43 views

How to mount a windows share to ubuntu 18.04 using a kerberos ticket (for all users) (no credentials file)

I am aiming to mount a windows share to one of our ubuntu 18.04 machines, we aim to do mount the share using a Kerberos ticket, we wish to have the mount accessible for all users and want to avoid ...
2
votes
1answer
94 views

What does this Upgrade error means?

I get this error below when i just run sudo apt-get updata and sudo apt-get upgrade: Setting up sssd-common (2.3.1-3ubuntu4) ... Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing ...
0
votes
1answer
120 views

Systemd stuck looping through sssd daemon

I recently applied this fix to my fairly recent install of Ubuntu 20.4 on my Raspberry PI 4 in an attempt to correct this sssd bug. I ran the following commands: sudo cp /usr/lib/aarch64-linux-gnu/...
2
votes
1answer
383 views

Sssd.service Ubuntu 20.04 Desktop Problem

I tried the installs on Ubuntu 18 and 16 Desktop and Server versions and it worked. I think the only problem is with ubuntu 20.04 Desktop. Device MacBook Pro 2015 13 inches. Şub 12 17:16:35 User ...
1
vote
0answers
237 views

LDAP authentication on Ubuntu 18.04

context I'm trying to configure LDAP authentication on an Ubuntu 18.04 machine. steps to reproduce In order to do that, I followed the following steps: apt install sssd libpam-sss libnss-sss create ...
0
votes
0answers
119 views

Using SSSD and realmd to join domain on Ubuntu 18.04 desktop, but after idle period users IDs not recognized

Running Ubuntu 18.04, I can join a machine to the domain successfully, and if I log in to the machine immediately via the GUI with an AD account it will work and I will be able to run id <username&...
0
votes
0answers
28 views

SSSD with AD: Totally confused why realmd keeps overwriting my sssd.conf

I've been struggling with this for a while now. I'm trying to make sure my AD IDs are consistent across all my machines. I managed to get sssd to use AD UID/GID earlier by setting ldap_id_mapping = ...
1
vote
0answers
235 views

Active Directory Ubuntu 20.04 [closed]

I'm adding my ubuntu 20.04 to my company's Active Directory I set everything up correctly, all the testicles work, he even pulls the name user, when logging in but it appears as invalid password, I ...
0
votes
0answers
382 views

SSSD with AD: How can I ensure AD groups not missing when ldap_id_mapping = False?

Why does altering ldap_id_mapping present different group memberships on the same AD user? I was hoping to have my UID/GID be the same as AD with IDMU: SSSD with AD: use UID/GID specified on domain ...
1
vote
1answer
483 views

SSSD with AD: use UID/GID specified on domain server instead of something random?

I have an AD environment with IDMU and specified UID/GID for my domain users. SSSD-connected domain user does not share the same UID/GID on Ubuntu as AD. Here's the default unedited sssd.conf in ...
0
votes
0answers
210 views

vsftpd Authenticating FTP server against Windows AD server not working

I'm new to Linux, and I'm trying to authenticate vsftpd server against my Active directory server. I have joined the domain successfully following this article: https://nerdonthestreet.com/wiki?find=...
0
votes
0answers
631 views

ubuntu 20.10 system security services daemon failed to start

i understand that there are several posts on this issue but as i am not very familiar with this subject I need some guidance. I looked at Ubuntu 20.10 sssd (System Security Services Daemon) failure ...
3
votes
0answers
4k views

Having SSSD problems at boot since upgrading to 20.10

I recently upgraded to Ubuntu (Gnome) 20.10 and ever since I have lots of messages like SSSD failed to start system security daemon dependency failed for PAM security socker ... and some more ...
12
votes
1answer
7k views

Ubuntu 20.10 sssd (System Security Services Daemon) failure

Don't know why, but they decided to add sssd (System Security Services Daemon) to the standard Ubuntu 20.10 upgrade and fresh install. It fails to start, and generates lots of error messages. It's not ...
0
votes
0answers
250 views

sssd sudenly got installed on Ubuntu 20.04!

Today I was working with my fresh installation of Ubuntu 20.04 (about 10 days ago) and I have issued the sudo apt update and sudo apt upgrade commands as usual. However, I have encountered a couple of ...
1
vote
1answer
3k views

ubuntu 20 broke samba using sssd

I am using Ubuntu (server) with SSSD to join active directory domain. (using realm join to join the server to the domain) The only settings (other than shares) I change in smb.conf are the following: ...
0
votes
1answer
400 views

SSSD with LDAP makes apparmor very noisy in syslog

When loging in with SSSD configured against LDAP, syslog becomes very noisy with apparmor messages. This is somewhat annoying when scanning the logs for valuable information. Maybe someone already ...
0
votes
0answers
30 views

Ubuntu desktop hostname is not creating DNS record

I have joined the ubuntu 18.04 LTS desktop version to AD domain using realmd and sssd, however the host name is not creating DNS entry. when i nslookup the hostname...it comes as test4. and not FQDN ...
0
votes
0answers
60 views

Login on Ubuntu 18.04 via FreeIPA fails

I have set up a FreeIPA server on a Ferdora 32 VM Connecting from another Fedora VM and authenticating it works fine. Now I would like to use this in an Ubuntu 18.04 LXC among others. The installation ...
0
votes
1answer
49 views

Add individual user to sudoers file using SSSD in Ubuntu?

I've set up SSSD on one of our Linux VMs and added an AD group to the sudoers file. That works fine. The issue I'm having is I have another user who is not in the group that needs sudo access. I added ...
1
vote
1answer
1k views

SFTP with Active Directory authentication (RealmD and SSSD)

What it should look like: My Ubuntu VM is connected through SSSD to my Active Directory Server. I want an SFTP Server that jails incomming Users that have a specific AD Group (USR-SFTP@domain) ...
2
votes
0answers
84 views

sssd got killed due to segfault in ubuntu 16.04

SSSD.LOG -------------- (Sun Jun 14 20:23:53 2020) [sssd] [mt_svc_sigkill] (0x0010): [pam][13305] is not responding to SIGTERM. Sending SIGKILL. (Sun Jun 14 20:29:34 2020) [sssd] [...
1
vote
0answers
137 views

SSSD Active Directory Integration with VSFTPD

My goal is to setup VSFTPD with AD authentication via SSSD. I ran through the article on Ubuntu's website here https://ubuntu.com/server/docs/service-sssd. I was able to join my domain, however ...
0
votes
0answers
465 views

[sssd[krb5_child[22140]: No credentials cache found (filename: /tmp/

All of a sudden, new users cannot ssh into our ubuntu servers. When attempting, the connection will just close. I tried doing an su with my test user who has never logged into the server before and I ...
1
vote
0answers
1k views

Getting specific errors on sssd? What does it mean and how to fix?

When I run systemctl status sssd I either get one of two messages. Can anyone tell me what this means and how to fix it? ● sssd.service - System Security Services Daemon Loaded: loaded (/lib/...
1
vote
1answer
376 views

Is it still possible to authenticate and authorize 20.04 against an unencrypted LDAP server?

20.04/'Focal Fossa' uses sssd to handle authentication, authorization, and user and group information against LDAP. Nevertheless, sssd does not support authentication over an unencrypted channel. I ...
1
vote
0answers
254 views

Strange behavior with pam_mount

i have a strange behavior with pam_mount on an Ubuntu 20.04 (firsch installed). The client authenticates to an ADS (UCS server 4.4) with Kerberos. The client has joined the domain and I can login with ...
1
vote
0answers
2k views

SSSD service not working to join Active Directory - Ubuntu 18.04 LTS

I'm a new user of Ubuntu. I want that my Ubuntu desktop could join Windows AD domain.When I try to join Active Directory with the procedure SSSD and Active Directory from Ubuntu Documentation. I'm in ...
3
votes
1answer
2k views

Ubuntu 18.04.3: Windows Domain Join Guide

Good day. Over the last few days I have gone through every guide I could find for joining Ubuntu 18.04 to a windows domain. I have what I think is a working guide after much trial and error. Would ...
1
vote
0answers
260 views

SSSD with “ldap_id_mapping = false” will fail to start, clearing /var/lib/sss/db/* and restarting service does not resolve

I’m working through a strange issue with SSSD on Ubuntu 18.04 - Unit is bound to the domain using Realmd, with SSSD as the primary authentication management service. If I change the line: ...
-1
votes
1answer
345 views

How can I request a package for “authselect” on Ubuntu?

I find authselect (link to project on GitHub) a very convenient piece of software. How can I request that it be packaged for Ubuntu?
0
votes
2answers
103 views

Using sssd on a diskless PXE clients

Does Ubuntu have an equivalent of rwtab? I am attempting to get sssd to run on a read-only nfsroot. I have bypassed the logging failure with a systemd dropin file, but have yet to find an desirable ...
1
vote
1answer
327 views

how to fix sssd segfault on ubuntu 18.04.02?

I've got an Ubuntu 18.04.02 server running samba and sssd with a decent load on it, between 300-400 active users during the day. I put it in Sunday, and it has worked fine until today the system ...
0
votes
0answers
130 views

Error while installing SSSD

I have the following error when running make install on sssd-2.1.0. I have tried all the options which says recompile using -fPIC to no avail. Please help. I have also used --enable-shared in my ...
0
votes
1answer
1k views

Error Ubuntu 18.04.02 LTS with add domain

We have an issue with Ubuntu 18.04.02 LTS. We are trying to add domain and we can't. Feb 18 09:32:26 nginx sshd[8383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ...
2
votes
4answers
11k views

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the ...
2
votes
2answers
798 views

Wrong start and expire date in credentials cache after kerberos auth

I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain. Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
1
vote
0answers
254 views

How can i use sudo for freeipa user in ubuntu?

I have installed Freeipa client on Ubuntu, I am able to login using remote user credentials. But the challenge is that I'm not able to run sudo with the remote user. I have tried editing the /etc/...
1
vote
0answers
1k views

“user NOT in sudoers” when using RealmD, SSSD

Recently began joining our Ubuntu server to the domain for authentication. For the most part I have been successful and believe to have all configs identical on each system. However, ran into two ...