Does sssd read the kerberos system config when krb5 is used as auth provider ?

exceed450 · 05-11-2015, 09:01 AM

I'm about to configure the sssd daemon with kerberos as the authentication provider, but im seeing that you configured the server names of the kdc directlt in the sssd configuration file in a domain section. That makes me wonder if sssd will be using that configuration to talk to the kerberos server(s) directly, or if it is still reading the /etc/krb5.conf file....

Does sssd still read the /etc/krb5.conf file when it is configured to use kerberos as the authentication provider ?

exceed450 · 05-17-2015, 02:44 PM

Nobody knows this ? Seeing how popular ssd and kerberos is these days, and has been i would think that someone on this forum would know this as some people seems to be quite knowledgeable. If you are setting up sssd, kerberos and dont know this then you should know it and find out for yourself to understand your own setup, at least i would advise that you would use the time to understand it.

TB0ne · 05-17-2015, 03:03 PM

Quote:

Originally Posted by exceed450

Nobody knows this ? Seeing how popular ssd and kerberos is these days, and has been i would think that someone on this forum would know this as some people seems to be quite knowledgeable. If you are setting up sssd, kerberos and dont know this then you should know it and find out for yourself to understand your own setup, at least i would advise that you would use the time to understand it.

So since you came back to complain that other people 'don't know this', why don't YOU know it?? Seeing as you say that we all should, and that everyone else should take the time to understand this...why does that not mean that YOU don't need to take the time to understand it, and do your own research???

The Red Hat documentation on SSSD covers what you're asking. Since you say that we should 'find out for yourself', I'll leave the documentation reading to you.

exceed450 · 05-18-2015, 02:21 AM

Quote:

Originally Posted by TB0ne

So since you came back to complain that other people 'don't know this', why don't YOU know it?? Seeing as you say that we all should, and that everyone else should take the time to understand this...why does that not mean that YOU don't need to take the time to understand it, and do your own research???

The Red Hat documentation on SSSD covers what you're asking. Since you say that we should 'find out for yourself', I'll leave the documentation reading to you.

Very "mature" answer. No i doesnt cover that from what i can see and i havent seen any other place that covers it. I ask since this is a forum to ask questions.

TB0ne · 05-18-2015, 08:30 AM

Quote:

Originally Posted by exceed450

Very "mature" answer.

Yes, it was, considering both the question and the whining about how no one has answered you.

Quote:

No i doesnt cover that from what i can see and i havent seen any other place that covers it. I ask since this is a forum to ask questions.

Then you need to read it again, carefully. Since (as you said), "If you are setting up sssd, kerberos and dont know this then you should know it and find out for yourself to understand your own setup, at least i would advise that you would use the time to understand it."

So, follow your own advice: go find out for yourself.