Configuring SSSD on Flatcar Container Linux

Flatcar Container Linux ships with the System Security Services Daemon, allowing integration between Flatcar Container Linux and enterprise authentication services.

Configuring SSSD

Edit /etc/sssd/sssd.conf. This configuration file is fully documented here . For example, to configure SSSD to use an IPA server called ipa.example.com, sssd.conf should read:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

[sssd]
config_file_version = 2
services = nss, pam
domains = LDAP
[nss]
[pam]
[domain/LDAP]
id_provider = ldap
auth_provider = ldap
ldap_schema = ipa
ldap_uri = ldap://ipa.example.com

Start SSSD

1

sudo systemctl start sssd

Make SSSD available on future reboots

1

sudo systemctl enable sssd