SSSD vs AD / SASL postfix cyrus

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/3510

• Created at 2017-09-11 16:16:34 by edg973
• Closed at 2017-09-14 16:46:50 as Invalid
• Assigned to nobody

---

Hello,
I am very confused because this is maybe not the good place to post my requests about SSSD.
I was using SSSD last year and I was refering to https://fedorahosted.org/sssd/wiki/ ; this wiki does not exist. So as I do not know exactly to post my request, I tried here.

1. So my questions are about where to find reference documentations about SSSD, are the only sites for documentation on RedHat Documentation ? Community documentation ? And https://pagure.io/docs/SSSD/sssd/ now ?

2. There was a wiki on how to join a linux on a Active Directory before https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server#no1
   It was well detailed, with a link to a powershell script "create-sssd-keytab.ps1" to create keytab file on Windows server and import it on linux side. Is that documentation removed ? Should we use realm command instead fo linux integration in AD ?

3. I am looking to make work a postfix / cyrus mail server with AD authentication. For that, I planned to use sasl with pam.
   I am supposing PAM to work with SSSD vs AD. Can sasl work with SSSD in this configuration ?

Thank you very much all help, Best Regards

Comments

---

Comment from sbose at 2017-09-11 16:33:33

fedorahosted was shut down and so far not all pages are converted into the new format used by pagure.

In the meantime you can find the old pages at archive.org https://web-beta.archive.org/web/20160328145724/https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server

HTH

bye,
Sumit

---

Comment from edg973 at 2017-09-11 19:20:11

Hello,
Thank you, It is great to find back these links because I am accustomed to them.

Otherwise, Is there a forum for SSSD users, where I could ask informations concerning postfix cyrus sasl vs sssd authentication ?

I would like my users using the mail server postfix and imap server cyrus able to authenticate against AD. It suppose postfix and cyrus configured with sasl, and sasl configured to use pam.
Pam should be configured to used SSSD against AD....

[Postfix / Cyrus <==> sasl (pam) <==> SSSD] .... <===> [MY Microsoft Windows Server Active Directory]

I would like if someone has already used this configuration. Does it work ?

I think I could as well use FreeIPA instead of Windows AD server, if SSSD is configured in this way. But I am not very used with FreeIPA and AD trust for the moment.

Best Regards.

---

Comment from jhrozek at 2017-09-11 20:13:07

You can ask on the sssd-users list: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/

---

Comment from edg973 at 2017-09-12 14:09:06

Hello,
thank you. I will use the sssd-user list sssd-users@lists.fedorahosted.org

---

Comment from jhrozek at 2017-09-14 16:46:51

Metadata Update from @jhrozek:

• Issue close_status updated to: Invalid
• Issue status updated to: Closed (was: Open)