This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/2920 This came up during an IRC discussion with Sumit as a cheap way to proceed towards fixing ticket #2707. If we drop 'enable_only = sssd' from localauth_plugin. Then the krb5 default should be used after the SSSD plugin does not give a definitive result.
Upstream ticket: https://fedorahosted.org/sssd/ticket/2788
We already did some improvements to the localauth plugin logic, this ticket is an incremental improvement planned for the next version
master: 2658ad37cd04f211aa28b1d71acb27c4edfb03da
pls share the steps to verify this bugzilla?
Just check if there is no line 'enable_only=sssd' in /var/lib/sss/pubconf/krb5.include.d/localauth_plugin. Then content should just look like [plugins] localauth = { module = sssd:/usr/lib/sssd/modules/sssd_krb5_localauth_plugin.so } or ../lib64/.. depending on the platform HTH bye, Sumit
Verified with r7-permanent ~]# rpm -q sssd sssd-1.15.2-33.el7.x86_64 [root@shr-r7-permanent ~]# cat /var/lib/sss/pubconf/krb5.include.d/localauth_plugin [plugins] localauth = { module = sssd:/usr/lib64/sssd/modules/sssd_krb5_localauth_plugin.so }
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:2294