Hi

Trying to use cached creds with local users in the passwd file
authenticating via kerberos.
I have id_provider set to files and auth_provider set to krb5(AD DC).
Online authentication works fine however when I disconnect the network
authentication fails. The computer is not joined to a domain, I am only
leveraging the domain/realm for authentication purposes

Relevant entries
[pam]
offline_credentials_expiration = 7

[domain]
cache_credentials=true
account_cache_expiration=8
id_provider=files
auth_provider=krb5
krb5_server=srva.example.com
krb5_kpasswd=srva.example.com
krb5_realm=EXAMPLE.COM
dns_discovery_domain=EXAMPLE.COM
krb5_store_password_if_offline=true

Is this a supported configuration for offline logins with cached
credentials?

Thanks
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to