[SOLVED] sssd: Benign local domain sssd.conf needed

boxyzzy · 10-05-2016, 07:38 AM

I need a working benign sssd.conf for a local domain that presents no change to the existing userid/password or userid/ssh_keys authentication process.

Its only purpose is to comply with the DISA STIG RHEL-07-010410 requirement.

I've tried an /etc/sssd/sssd.conf:
[sssd]
config_file_version = 2

[domain/LOCAL]
id_provider = local
auth_provider = local
access_provider = permit

sssd fails to start:
... No services configured!
... SSSD couldn't load the configuration database.

Thanks, in advance, for your help.

Mike

boxyzzy · 10-06-2016, 01:31 PM

I share the resolution so that it may help others.

/etc/sssd/sssd.conf:
[sssd]
config_file_version = 2
services = pam
domains = LOCAL

[domain/LOCAL]
id_provider = local
auth_provider = local
access_provider = permit
debug_level = 0