SSSD access_provider = simple is NOT working as expected after updating sssd.

Solution In Progress - Updated -

Issue

  • After patching to RHEL 7.3, we are having issues with AD users login where access_provider = simple doesn't work as expected.
  • If we have any groups specified as restrictions within sssd.conf, we are having issues with those groups authenticating through ssh/pam . We're able to "su" into the user account just fine, and disabling the group restriction allows all domain users to authenticate (which is expected, but not desired).
access_provider = simple
simple_allow_groups = ad_group_admin@example.com  ad_group_linux@example.com 

Environment

  • Red Hat Enterprise Linux 7.3
  • sssd

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content