-
Bug
-
Resolution: Done-Errata
-
Undefined
-
rhel-8.10
-
sssd-2.9.4-1.el8
-
None
-
None
-
rhel-sst-idm-sssd
-
ssg_idm
-
20
-
21
-
0
-
Dev ack
-
False
-
-
None
-
None
-
Pass
-
Manual
-
None
What were you trying to do that didn't work?
I was trying to configure sssd to work with smart cards. The new way of specifying shadowutils works, however, it seems it's not backward compatible and we can not log in with "id_provider = files" anymore.
How reproducible:
Always
Please provide the package NVR for which bug is seen:
sssd-2.9.3-2.el8.x86_64
Steps to reproduce
I used the config. In there, there is the old configuration of sssd which doesn't seem to work:
[sssd]
debug_level = 9
services = nss, pam, ssh, sudo
domains = shadowutils
certificate_verification = no_ocsp
[nss]
debug_level = 9
[pam]
debug_level = 9
pam_cert_auth = True
[domain/shadowutils]
id_provider = files{}
Expected results
Smart card login should succeed. Su command and GUI should prompt for smart card pin and login if the pin is correct.
Actual results
Su command is asking for user password and GUI is prompting "Please (re)insert (different) Smartcard".
- is duplicated by
-
RHEL-20440 Change in sssd 2.9.3-2 is breaking smartcard authentication
- Closed
- links to
-
RHBA-2023:121691 sssd bug fix and enhancement update
- mentioned on