feat: disable chpass provider in SSSD configuration

Using the "change password" feature of pam_sss modules always lead to a
bad situation where AD password and Gassi password are not synchronyzed
anymore. To avoid this, we disable the feature in SSSD configuration.

The network password can still be changed using the command `kpasswd`
provided by package `krb5-user`.
This commit is contained in:
Michel Decima
2021-11-01 18:58:30 +01:00
parent 0ccbd557cc
commit d89eea147d

View File

@@ -26,6 +26,7 @@ debug_level = 9
min_id = 1000
id_provider = files
auth_provider = krb5
chpass_provider = none
cache_credentials = true
use_fully_qualified_names = false
krb5_realm = AD.FRANCETELECOM.FR