Hello all,
when using smart card auth with pam_pkcs11 there is an option to set 'nullok'
to true/false. Setting it to false effectively makes pam_pkcs11 ignore empty
pin entries (this option is also available for pam_unix and set to false as
default). So if I get a pin prompt and just press Ent
We run stock sssd on a number of Ubuntu 18.04 servers, and I have not
seen this problem. Also, I haven't done anything to the out of box DNS
configuration. The issue we run in to regularly is that Kerberos
tickets are not renewed and the machine falls out of the domain, but we
now think this