SSSD - access_provider = simple is NOT working as expected after updating sssd.

Solution In Progress - Updated -

Issue

  • After patching to RHEL 7.3, we are having issues with AD users login where access_provider = simple doesn't work as expected.
  • If we have any groups specified as restrictions within sssd.conf, we are having issues with those groups authenticating through ssh/pam . We're able to "su" into the user account just fine, and disabling the group restriction allows all domain users to authenticate (which is expected, but not desired).
access_provider = simple
simple_allow_groups = ad_group_admin@example.co  ad_group_linux@example.com

Environment

  • Red Hat Enterprise Linux 7.3
  • sssd

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.