[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-12 Thread Sumit Bose
On Thu, Mar 12, 2020 at 03:13:57PM -, Hristina Marosevic wrote: > > On Fri, Mar 06, 2020 at 12:44:35PM -, Hristina Marosevic wrote: > > > > Hi, > > > > no [pam] is not needed for your use case, access via ssh. > > > > > > This command looks for certificates from a Smartcard connected

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-12 Thread Hristina Marosevic
> On Fri, Mar 06, 2020 at 12:44:35PM -, Hristina Marosevic wrote: > > Hi, > > no [pam] is not needed for your use case, access via ssh. > > > This command looks for certificates from a Smartcard connected to the > local system. However p11_child is used to validate the certificates for >

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-12 Thread Sumit Bose
On Fri, Mar 06, 2020 at 12:44:35PM -, Hristina Marosevic wrote: > Hello, > > I added: "certificate_verification = no_ocsp, no_verification" in [sssd] part > of the sssd configuration and I didn't add the CA certs because the > certification validation is disabled, but I am getting the same

[SSSD-users] Re: Change primary group

2020-03-12 Thread Sumit Bose
On Thu, Mar 12, 2020 at 09:26:49AM +0100, Jannis Mann wrote: > Hi, > > I've sssd running with ldap provider and therefore use a binding account. > > In general everything works. I've a question regarding the primary group. > > When I login with any user who I permitted to in the sssd.conf all

[SSSD-users] Change primary group

2020-03-12 Thread Jannis Mann
Hi, I've sssd running with ldap provider and therefore use a binding account. In general everything works. I've a question regarding the primary group. When I login with any user who I permitted to in the sssd.conf all users have the Domain Users gorup as primary group. So if I create a file