I'm trying to learn how PAM, SSSD and nsswitch works. I think these services are so useful although all the documentation over there is a little bit outdated and "esoteric".
So I'm here asking for some help.
This is how I configured my sssd.conf:
[sssd]
config_file_version = 2
services = pam,nss
domains = persefone.com
[pam]
[nss]
[autofs]
[domain/persefone.com]
id_provider = ldap
auth_provider = krb5
ldap_schema = rfc2307bis
enumerate = false
cache_credentials = false
case_sensitive = true
ldap_use_tokengroups = false
ldap_uri = ldap://192.168.10.10
ldap_search_base = dc=persefone,dc=com
ldap_tls_reqcert = allow
krb5_server = 192.168.10.10
krb5_realm = PERSEFONE.COM
access_provider = ldap
ldap_access_filter = (memberOf=cn=Administradores,ou=group,dc=persefone,dc=com)
default_shell = /bin/bash
This is how my nsswitch.conf looks like:
passwd: compat sss
group: compat sss
hosts: files dns
networks: files dns
services: files
protocols: files
rpc: files
ethers: files
netmasks: files
netgroup: files nis
publickey: files
bootparams: files
automount: files nis
aliases: files
I read that PAM is deprecated, but all the information I find is about SSSD working together with PAM. I think there are a lot of things I don't understand about this. I will continue trying to learn. If you know about some good sources to learn about PAM, SSSD, NSSWITCH and these services with maybe some exercises, recommendations are welcome. Man pages are already read (and not understood so much...)
Thank you. Regards.