On (08/09/14 22:55), Jakub Hrozek wrote:

On Mon, Sep 08, 2014 at 01:51:49PM -0700, Jacob Weber wrote:

...

/etc/nsswitch.conf has:

passwd: files sss shadow: files sss group: files sss hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files sss netgroup: files sss publickey: nisplus automount: files aliases: files nisplus

/etc/sssd/sssd.conf has:

[sssd] config_file_version = 2 services = nss, pam domains = AD

[nss] filter_users = root override_shell = /bin/bash override_homedir = /home/%u

[pam]

[domain/AD]

id_provider = ldap auth_provider = ldap chpass_provider = ldap

access_provider = ldap ldap_uri = ldaps://my-ldap-server/ ldap_schema = rfc2307bis (other ldap settings)

cache_credentials = true enumerate = false

Well, sudo is not configured :-)

Can you check out man sssd-ldap, there are some examples, hopefully that would be helpful..

Probably you meant manual page sssd-sudo.

LS