sssd: Using krb5 auth_provder with local id_provider?

asked 2015-07-16 16:38:57 -0600

larsks gravatar image

My local username is different from my Kerberos principal. Upon logging into my system, I would like to automatically acquire a valid Kerberos ticket (assuming my local account uses the same password as my kerberos account), and I would like this ticket renewed automatically for the valid renewable lifetime of the ticket.

Is this possible using sssd?

There is a krb5_map_user option, but at least in sssd 1.12 it does not appear to be possible to combine the Kerberos auth_provider with the local id_provider.

edit retag flag offensive close merge delete