Questions tagged [sssd]

For questions about System Security Services Daemon (sssd) and sssd.service

The System Security Services Daemon (sssd) is a service (sssd.service) that is used to manage and provide access to remote directories and authentication mechanisms. It acts as an intermediary between a system and identity/authentication sources, such as:

  1. LDAP (Lightweight Directory Access Protocol)
  2. Active Directory (AD)
  3. FreeIPA (Identity, Policy, and Audit)
  4. Kerberos
  5. Local identity stores

SSSD is configured through /etc/sssd/sssd.conf. The configuration includes details about identity providers, domains, and authentication mechanisms.


  • Start/stop SSSD service:

    sudo systemctl start sssd
    sudo systemctl stop sssd
    
  • Check service status:

    sudo systemctl status sssd
    
  • View logs for debugging:

    sudo journalctl -u sssd
    
94 questions
19
votes
1 answer

Ubuntu 20.10 sssd (System Security Services Daemon) failure

Don't know why, but they decided to add sssd (System Security Services Daemon) to the standard Ubuntu 20.10 upgrade and fresh install. It fails to start, and generates lots of error messages. It's not configured at install time, as it's missing the…
heynnema
  • 73,649
9
votes
5 answers

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the article I followed in order to get my Ubuntu 18.04…
7
votes
1 answer

Why is sssd an unrecognized service, even though it is installed and can be restarted?

Why is sssd an unrecognized service, even though it is installed and can be restarted? BTW: This concerns Ubuntu 14.04.1 LTS, it was not like that in 12.04 I will show what I mean below, I think it is a bug but I am interested in an explanation…
jringoot
  • 838
7
votes
0 answers

Having SSSD problems at boot since upgrading to 20.10

I recently upgraded to Ubuntu (Gnome) 20.10 and ever since I have lots of messages like SSSD failed to start system security daemon dependency failed for PAM security socker ... and some more dependency related info... during boot. As a beginner to…
Arnold
  • 215
4
votes
2 answers

SSSD with LDAP makes apparmor very noisy in syslog

When loging in with SSSD configured against LDAP, syslog becomes very noisy with apparmor messages. This is somewhat annoying when scanning the logs for valuable information. Maybe someone already solved this and can make life easier sharing their…
msi
  • 41
3
votes
0 answers

Getting specific errors on sssd? What does it mean and how to fix?

When I run systemctl status sssd I either get one of two messages. Can anyone tell me what this means and how to fix it? ● sssd.service - System Security Services Daemon Loaded: loaded (/lib/systemd/system/sssd.service; enabled; vendor preset:…
3
votes
1 answer

Ubuntu 18.04.3: Windows Domain Join Guide

Good day. Over the last few days I have gone through every guide I could find for joining Ubuntu 18.04 to a windows domain. I have what I think is a working guide after much trial and error. Would appreciate if others could verify. So far I have…
3
votes
1 answer

snap applications without permissions to write to home directory when using sssd

I have set up sssd and joined my 18.04 LTS workstation to the company domain. Most things work OK except for a couple of snap applications. When trying to run them I get errors creating files in ~/snap. :~$ skype cannot create user data directory:…
2
votes
2 answers

Active Directory users unable to change passwords [SSSD]

I've set up an Ubuntu 16.04 system to join a AD domain following the instruction set here. I can login with AD users and everything is working correctly there, however AD users are unable to change their passwords either with passwd or kpasswd. I'm…
cypher
  • 21
2
votes
0 answers

LDAP configuraton issue

I'm trying to set up login via LDAP and AD. I can do user ID and group lookups (id my_user). Problem is when I’m trying to login with an AD/LDAP account via SSH for example. From /var/log/auth.log: May 18 14:12:24 ubuntu-server sshd[3658]:…
mosharo
  • 21
2
votes
1 answer

Dependency failed for SSSD

When I booted my system today, I got the following error messages: Jan 07 19:38:25 ubuntu20 systemd[1]: Condition check resulted in System Security Services Daemon being skipped. Jan 07 19:38:25 ubuntu20 systemd[1]: Reached target User and Group…
stumblebee
  • 4,379
2
votes
0 answers

Active Directory SSSD - Change Password on GDM login Screen

Looking to see if I can expand the capabilities of the SSSD/AD system with GDM, or SDDM. We want users to be able to change their Active Directory password through our Ubuntu machines, if their password expires through our AD. Is this possible?
2
votes
1 answer

Sssd.service Ubuntu 20.04 Desktop Problem

I tried the installs on Ubuntu 18 and 16 Desktop and Server versions and it worked. I think the only problem is with ubuntu 20.04 Desktop. Device MacBook Pro 2015 13 inches. Şub 12 17:16:35 User systemd[1]: sssd-sudo.socket: Job…
2
votes
0 answers

sssd got killed due to segfault in ubuntu 16.04

SSSD.LOG -------------- (Sun Jun 14 20:23:53 2020) [sssd] [mt_svc_sigkill] (0x0010): [pam][13305] is not responding to SIGTERM. Sending SIGKILL. (Sun Jun 14 20:29:34 2020) [sssd] [monitor_restart_service] (0x0010): Process [nss], definitely…
gokam
  • 21
2
votes
2 answers

Wrong start and expire date in credentials cache after kerberos auth

I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain. Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some server shares. If i call klist my credentials cache…
1
2 3 4 5 6 7