Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

sssd: Using krb5 auth_provder with local id_provider?

My local username is different from my Kerberos principal. Upon logging into my system, I would like to automatically acquire a valid Kerberos ticket (assuming my local account uses the same password as my kerberos account), and I would like this ticket renewed automatically for the valid renewable lifetime of the ticket.

Is this possible using sssd?

There is a krb5_map_user option, but at least in sssd 1.12 it does not appear to be possible to combine the Kerberos auth_provider with the local id_provider.