search for: only_if

...cess=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session sufficient pam_sss.so session required pam_unix.so try_first_pass session optional pam_umask.so session optional pam_gnome_keyring.so auto_start only_if=gdm,gdm-password,lxdm,lightdm With kind regards, ulrich

...if.so service in > crond quiet use_uid > session required pam_unix.so > session sufficient pam_sss.so > session required pam_unix.so try_first_pass > session optional pam_umask.so > session optional pam_gnome_keyring.so auto_start > only_if=gdm,gdm-password,lxdm,lightdm Is it normal to have pam_unix and pam_sss twice for each each section? -- Jonathan Billings <billings at negate.org>

Thanks a lot for looking over the config. I am at the topic "user data is available" id <username> and getent passwd and ldapsearch -x -b "ou=XXX,o=YYY" uid=<username> give the correct results ldapsearch gives also the correct host attribute i have set in the ldap server. Regarding the manpage of sssd.conf the lines access_provider = ldap ldap_access_order =