Hi,

On Sun, Mar 10, 2019 at 7:56 AM Albert Szostkiewicz via FreeIPA-users
<[email protected]> wrote:
>
> Hi!
>
> If os login for domain user is verified by FreeIpa (which sets uid etc) what 
> happens if I use ipa-client on laptop and be outside my network ? If I won't 
> be able to connect to IPA for login verification, is there any kind of 
> fallback ? Or should i make any specific settings for such situation ? 
> (assuming that i don't have access to network at all)

sssd has a cache that is designed for that situation.
More information is available at the upstream design and implementation page:
https://docs.pagure.org/SSSD.sssd/design_pages/cached_authentication.html

And in the RHEL7 docs:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/sssd#sssd-overview-how
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/sssd-configure-additional-provider-options#sssd-cache-cred

Cheers
François

> Cheers!
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to