< Previous | Contents | Next >

5.5. SSSD Configuration

There is no default/example config file for /etc/sssd/sssd.conf included in the sssd package. It is necessary to create one. This is a minimal working config file:

[sssd]

services = nss, pam config_file_version = 2 domains = MYUBUNTU.EXAMPLE.COM

[domain/MYUBUNTU.EXAMPLE.COM]

id_provider = ad access_provider = ad

# Use this if users are being logged in at /.

# This example specifies /home/DOMAIN-FQDN/user as $HOME. Use with pam_mkhomedir.so override_homedir = /home/%d/%u

# Uncomment if the client machine hostname doesn't match the computer object on the DC.

# ad_hostname = mymachine.myubuntu.example.com

# Uncomment if DNS SRV resolution is not working

# ad_server = dc.mydomain.example.com

# Uncomment if the AD domain is named differently than the Samba domain

# ad_domain = MYUBUNTU.EXAMPLE.COM

# Enumeration is discouraged for performance reasons.

# enumerate = true

After saving this file, set the ownership to root and the file permissions to 600:

sudo chown root:root /etc/sssd/sssd.conf sudo chmod 600 /etc/sssd/sssd.conf

If the ownership or permissions are not correct, sssd will refuse to start.

< Previous | Contents | Next >