My sssd.conf: [sssd] config_file_version = 2 reconnection_retries = 3 sbus_timeout = 30 services = nss, pam domains = FLADI.AT
[nss] filter_groups = root filter_users = root reconnection_retries = 3 [pam] reconnection_retries = 3 [domain/FLADI.AT] auth_provider = krb5 krb5_kdcip = ... krb5_realm = FLADI.AT id_provider = ldap chpass_provider = ldap ldap_uri = ldap://... ldap_search_base = dc=fladi,dc=at ldap_user_search_base = ou=users,dc=fladi,dc=at ldap_group_search_base = ou=groups,dc=fladi,dc=at ldap_tls_reqcert = demand ldap_tls_cacert = /etc/ssl/certs/cacert.org.pem cache_credentials = true enumerate = true min_id = 0 max_id = 0 I did not use or change the krb5_ccname_template and krb5_ccachedir settings. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
