[SSSD-users] Re: sssd-ad on centos 7

2017-09-13 Thread Jakub Hrozek
On Tue, Sep 12, 2017 at 06:06:19PM +0100, John Beranek wrote: > On 12 September 2017 at 18:03, John Beranek wrote: > > On 12 September 2017 at 17:59, John Beranek wrote: > >> On 11 September 2017 at 14:28, Jakub Hrozek wrote: > >>> On Mon, Sep 11, 2017 at 12:23:26PM +0100, John Beranek wrote: > >>>

[SSSD-users] sssd email login performance

2017-09-13 Thread Galen Johnson
Hey, We're looking into why our servers are suddenly less performant with authentications than they used to be. We have SSSD set up to allow users to login with their email address. However, the email addresses are from various domains. It appears that sssd still attempts to break apart the

[SSSD-users] Re: SSSD vs AD / SASL postfix cyrus

2017-09-13 Thread Lukas Slebodnik
On (12/09/17 09:24), Edouard Guigné wrote: >Hello dear SSSD Users, > >I would like to get informations concerning postfix cyrus sasl vs sssd >authentication. > >My goal is that users using my mail server (postfix and imap server cyrus) to >be able to authenticate against AD. >It suppose postfix and

[SSSD-users] Re: Fwd: Re: Re: SSSD vs AD / SASL postfix cyrus

2017-09-13 Thread Lukas Slebodnik
On (13/09/17 13:11), Edouard Guigné wrote: >Dear Lukas, > Please keep replies in sssd-users lists. So anybody else can help as well. >What about postfix if configured with saslauthd >(/etc/postfix/sasl/smtpd.conf) ? >pwcheck_method: saslauthd > I do not have any experience with postfix configurati

[SSSD-users] Fwd: Re: Fwd: Re: Re: SSSD vs AD / SASL postfix cyrus

2017-09-13 Thread Edouard Guigné
Dear SSSD users, Does someone know how to configure PAM service for postfix smtp in case of using saslauthd (pam method) with SSSD ? Can a symbolic link "/etc/pam.d/smtp" to another pam service which already uses pam_sss be enough ? as in case of cyrus saslauthd (with pam) and sssd. Best R

[SSSD-users] Re: Fwd: Re: Fwd: Re: Re: SSSD vs AD / SASL postfix cyrus

2017-09-13 Thread Galen Johnson
I would suggest asking on the postfix list. They are pretty responsive. However, you don't need to set up a link, you can just include another pam file in the existing pam file...the smtp pam file likely already has this. Of course, I may be misunderstanding your question. =G= ___