https://lesitedefrancois.be/en/tags/ad/Recent content in Ad on Le Site de FrançoisHugo -- gohugo.ioen© 2026 Françoishttps://lesitedefrancois.be/en/security/sssd/Mon, 01 Jan 0001 00:00:00 +0000https://lesitedefrancois.be/en/security/sssd/<p><strong>SSSD (System Security Services Daemon)</strong> is a multi-daemon suite that connects Linux systems to remote identity and authentication providers, presenting their data through the standard Linux identity interfaces — <strong>NSS (Name Service Switch)</strong> for identity lookups (user names, UIDs, GIDs, group membership) and <strong>PAM (Pluggable Authentication Modules)</strong> for authentication and session management — without creating local user accounts. It was originally developed as a component of the FreeIPA project at Red Hat, introduced in Fedora 11 (2009), and quickly became the standard identity integration layer across RHEL, Fedora, Ubuntu, Debian, and most enterprise Linux distributions. Before SSSD, integrating a Linux host with <strong>LDAP</strong> or <strong>AD</strong> required configuring <code>nss_ldap</code>, <code>pam_ldap</code>, <code>pam_krb5</code>, and <code>pam_winbind</code> independently — each with its own caching (or lack thereof), its own reconnection logic, and its own configuration syntax. SSSD replaced this collection with a single, unified daemon providing caching, offline authentication, multi-domain support, and access control in one place.</p>