[SSSD-users] Re: Can SSSD be set up to disallow login if provider not available?

2022-07-07 Thread Fisher, Philip
Thank you both -- cannot believe I failed to see that option :-(. But at least you have cleared up the meaning as it was (IMO) slightly ambiguously phrased. Phil -- Phil J Fisher UNIX Technology Consultant -Original Message- From: James Ralston Sent: 07 July 2022 17:48 To: End-user

[SSSD-users] Re: Can SSSD be set up to disallow login if provider not available?

2022-07-07 Thread James Ralston
On Thu, Jul 7, 2022 at 6:21 AM Alexey Tikhonov wrote: > On Thu, Jul 7, 2022 at 12:14 PM Fisher, Philip wrote: > > > In particular, if the provider is offline/not available (in this > > case an AD server/servers) then login should fail. > > Sounds like `cache_credentials = false`? (see `man

[SSSD-users] Re: Can SSSD be set up to disallow login if provider not available?

2022-07-07 Thread Alexey Tikhonov
Hi, On Thu, Jul 7, 2022 at 12:14 PM Fisher, Philip wrote: > Hi SSSD experts > > I have tried examining various documentation and man pages but I am unable > to determine the answer. Specifically, for security reasons, we require > user on our Linux servers to login via AD credentials only