Questions tagged [sssd]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
0answers
26 views

sssd got killed due to segfault in ubuntu 16.04

SSSD.LOG -------------- (Sun Jun 14 20:23:53 2020) [sssd] [mt_svc_sigkill] (0x0010): [pam][13305] is not responding to SIGTERM. Sending SIGKILL. (Sun Jun 14 20:29:34 2020) [sssd] [...
1
vote
0answers
21 views

SSSD Active Directory Integration with VSFTPD

My goal is to setup VSFTPD with AD authentication via SSSD. I ran through the article on Ubuntu's website here https://ubuntu.com/server/docs/service-sssd. I was able to join my domain, however ...
0
votes
0answers
21 views

[sssd[krb5_child[22140]: No credentials cache found (filename: /tmp/

All of a sudden, new users cannot ssh into our ubuntu servers. When attempting, the connection will just close. I tried doing an su with my test user who has never logged into the server before and I ...
0
votes
0answers
36 views

Getting specific errors on sssd? What does it mean and how to fix?

When I run systemctl status sssd I either get one of two messages. Can anyone tell me what this means and how to fix it? ● sssd.service - System Security Services Daemon Loaded: loaded (/lib/...
1
vote
1answer
42 views

Is it still possible to authenticate and authorize 20.04 against an unencrypted LDAP server?

20.04/'Focal Fossa' uses sssd to handle authentication, authorization, and user and group information against LDAP. Nevertheless, sssd does not support authentication over an unencrypted channel. I ...
0
votes
0answers
20 views

Strange behavior with pam_mount

i have a strange behavior with pam_mount on an Ubuntu 20.04 (firsch installed). The client authenticates to an ADS (UCS server 4.4) with Kerberos. The client has joined the domain and I can login with ...
0
votes
0answers
31 views

sssd talloc_log_fn (0x0010): Bad talloc magic value - unknown value

Once a month the server OS crashes and when users are trying to log in it will deny access. After reboot the problem resolves itself. Error [sssd] [talloc_log_fn] (0x0010): Bad talloc magic value - ...
0
votes
0answers
58 views

ubuntu 18.0.4 LTS server hangs with SSSD and AUTOFS config

I have installed and updated my Ubuntu 18.0.4 server on my DL360 G9 server (serveral times now). And I then install SSSD and AUTOFS configuration to authenticate over LDAP . Everything goes fine but ...
0
votes
0answers
20 views

missing module from sssd-tools pysss

Ubuntu 18.04.04 sssd-tools installed but missing module pysss I discovered this when attempting to run sss_obfuscate sss_obfuscate -d gc Traceback (most recent call last): File "/usr/sbin/...
1
vote
0answers
437 views

SSSD service not working to join Active Directory - Ubuntu 18.04 LTS

I'm a new user of Ubuntu. I want that my Ubuntu desktop could join Windows AD domain.When I try to join Active Directory with the procedure SSSD and Active Directory from Ubuntu Documentation. I'm in ...
2
votes
0answers
1k views

Ubuntu 18.04.3: Windows Domain Join Guide

Good day. Over the last few days I have gone through every guide I could find for joining Ubuntu 18.04 to a windows domain. I have what I think is a working guide after much trial and error. Would ...
0
votes
0answers
388 views

DBusException: org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.sssd.infopipe was not provided by any .service files

My goal is to retrieve some additional user information for the currently active user. service sssd status tells me SSSD is up and running. Now I want to connect via DBUS. According to: https://...
1
vote
0answers
117 views

SSSD with “ldap_id_mapping = false” will fail to start, clearing /var/lib/sss/db/* and restarting service does not resolve

I’m working through a strange issue with SSSD on Ubuntu 18.04 - Unit is bound to the domain using Realmd, with SSSD as the primary authentication management service. If I change the line: ...
-1
votes
1answer
149 views

How can I request a package for “authselect” on Ubuntu?

I find authselect (link to project on GitHub) a very convenient piece of software. How can I request that it be packaged for Ubuntu?
0
votes
2answers
82 views

Using sssd on a diskless PXE clients

Does Ubuntu have an equivalent of rwtab? I am attempting to get sssd to run on a read-only nfsroot. I have bypassed the logging failure with a systemd dropin file, but have yet to find an desirable ...
1
vote
1answer
179 views

how to fix sssd segfault on ubuntu 18.04.02?

I've got an Ubuntu 18.04.02 server running samba and sssd with a decent load on it, between 300-400 active users during the day. I put it in Sunday, and it has worked fine until today the system ...
0
votes
0answers
106 views

Error while installing SSSD

I have the following error when running make install on sssd-2.1.0. I have tried all the options which says recompile using -fPIC to no avail. Please help. I have also used --enable-shared in my ...
0
votes
1answer
585 views

Error Ubuntu 18.04.02 LTS with add domain

We have an issue with Ubuntu 18.04.02 LTS. We are trying to add domain and we can't. Feb 18 09:32:26 nginx sshd[8383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ...
2
votes
2answers
6k views

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the ...
2
votes
2answers
465 views

Wrong start and expire date in credentials cache after kerberos auth

I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain. Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
1
vote
0answers
207 views

How can i use sudo for freeipa user in ubuntu?

I have installed Freeipa client on Ubuntu, I am able to login using remote user credentials. But the challenge is that I'm not able to run sudo with the remote user. I have tried editing the /etc/...
1
vote
0answers
819 views

“user NOT in sudoers” when using RealmD, SSSD

Recently began joining our Ubuntu server to the domain for authentication. For the most part I have been successful and believe to have all configs identical on each system. However, ran into two ...
1
vote
1answer
1k views

Issue for restricting SSH access from a Windows AD Group (using sssd)

I joined a ubuntu 16.04 server to my Windows AD for SSH authentication. It works fine until I want to restrict access to a specific group with sssd here's the content of my /etc/sssd/sssd.conf [sssd]...
1
vote
1answer
2k views

How to add an AD group members to a local group

I already have the AD integration working via sssd where a user logging in is a member of one of two AD groups. They are able to ssh into the server and if it's their first login they're granted ...
0
votes
1answer
505 views

Cannot connect to samba member server as local user a few days after AD join and SSSD

Edit: I tried to simplify the question: ========================================================================= How can I enable a local (linux/samba) user to access a samba share (member server) ...
2
votes
1answer
568 views

snap applications without permissions to write to home directory when using sssd

I have set up sssd and joined my 18.04 LTS workstation to the company domain. Most things work OK except for a couple of snap applications. When trying to run them I get errors creating files in ~/...
0
votes
1answer
90 views

Get pwd EXPIRE_DATE

I am trying to get EXPIRE_DATE of pwd for an active directory user in ubuntu. I can get information about the user with lslogins user but no information about password expire dates that are set in AD. ...
1
vote
1answer
792 views

sssd windows domain users does not have privileges over the ubuntu gui

ive currently installed a fresh ubuntu 16.04 and joined it to the domain using SSSD and realmd following this walk through: http://www.wolffhaven45.com/active-directory/...
0
votes
1answer
368 views

adcli and sssd behavior

I used to observe a ton of these messages on my domain machine. It seems after rebooting or restarting sssd, it would be normal and given time, it would start forking more and more processes and my ...
1
vote
2answers
4k views

Active Directory users unable to change passwords [SSSD]

I've set up an Ubuntu 16.04 system to join a AD domain following the instruction set here. I can login with AD users and everything is working correctly there, however AD users are unable to change ...
0
votes
0answers
1k views

Ubuntu 17.10 - Kerberos/SSSD AD User login only sometimes works

I am new here, so please advise me, if I did miss something about the rules here. We are running a network of computers in a Windows Server 2016 AD domain. In Ubuntu 16.04 we configured Ubuntu to ...
0
votes
0answers
1k views

How do you actually configure the /etc/sssd/sssd.conf in Ubuntu 16.4.2 LTS Desktop if using it as a Server OS

I'm having a problem configuring Ubuntu 16.4.2 LTS Desktop as a Server when trying to configure the /etc/sssd/sssd.conf file. Don't ask why I'm using Ubuntu Desktop other than I had issues with ...
1
vote
2answers
2k views

16.04 LTS Active Directory Integration with SSSD - authentication no longer working

By following this documentation, I succesfully joined my Ubuntu 16.04 LTS servers to my Active Directory running a pair of Windows 2016 domain controllers. It has been working for about two weeks but ...
0
votes
2answers
840 views

Attempting to Ubunutu to Active Directory, sssd.service failed

I'm working on adding Ubuntu to an AD domain. I've followed several guides and keep hitting the same problem: sssd.service failed. So far I have: apt-get'd samba, krb5, ntp, winbind verified that my ...
2
votes
0answers
652 views

LDAP configuraton issue

I'm trying to set up login via LDAP and AD. I can do user ID and group lookups (id my_user). Problem is when I’m trying to login with an AD/LDAP account via SSH for example. From /var/log/auth.log: ...
0
votes
1answer
677 views

How to prevent sssd package from modifying nsswitch.conf

We are running sssd on a number of Xenial servers to authenticate against Active Directory. Upon installation, the sssd package added sss to most lines in /etc/nsswitch.conf as documented in https://...
1
vote
1answer
2k views

SSSD list allowed users only

With nscd/nslcd authentication scheme, it was possible to get a list of allowed users issuing this command: getent passwd How can this be achieved with SSSD? There is an option enumeration, but this ...
7
votes
1answer
6k views

Why is sssd an unrecognized service, even though it is installed and can be restarted?

Why is sssd an unrecognized service, even though it is installed and can be restarted? BTW: This concerns Ubuntu 14.04.1 LTS, it was not like that in 12.04 I will show what I mean below, I think it is ...