Hi Stephen,
Stephen Gallagher wrote:
On Wed, 2012-07-25 at 18:43 +0530, Arpit Tolani wrote:
Edit nsswitch.conf to look for authenticaiton info in sssd. Remember to do this for passwd, shadow, group, and netgroup
passwd: sss files shadow: sss files group: sss files netgroup: sss
It is strongly recommended that you NEVER put 'sss' before 'files'. In the unlikely event that something goes seriously wrong with SSSD (such as entering an infinite loop), you will not be able to look up local users (including root!).
We always recommend the 'files sss' ordering.
Thanks for the hint. The setting above was for testing, in production we do have the correct order. :-)
Olaf