I may add something else. During sssd install there were several warning messages:
Configurando sssd-common (2.3.1-3) ...
Creating SSSD system user & group...
adduser: Aviso: El directorio personal «/var/lib/sss» no pertenece al usuario que está creando.
Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing complain mode
Warning from /etc/apparmor.d/usr.sbin.sssd (/etc/apparmor.d/usr.sbin.sssd line 54): Caching disabled for: 'usr.sbin.sssd' due to force complain
About the first warning "adduser: Aviso: El directorio personal «/var/lib/sss» no pertenece al usuario que está creando."
(translation: adduser: Warning: The personal directory «/var/lib/sss» doesn't belong to the user that is being created).
I can tell that it's true; the directory /var/lib/sss is owned by root instead of sssd.
All the directories and files inside /var/lib/sss are owned by sssd user except /var/lib/sss/deskprofile directory that is also owned by root.
Probably not a problem, but may be also patched.
I can't tell about the warning messages related to apparmor.
I may add something else. During sssd install there were several warning messages:
Configurando sssd-common (2.3.1-3) ... d/force- complain, forcing complain mode d/usr.sbin. sssd (/etc/apparmor. d/usr.sbin. sssd line 54): Caching disabled for: 'usr.sbin.sssd' due to force complain
Creating SSSD system user & group...
adduser: Aviso: El directorio personal «/var/lib/sss» no pertenece al usuario que está creando.
Warning: found usr.sbin.sssd in /etc/apparmor.
Warning from /etc/apparmor.
About the first warning "adduser: Aviso: El directorio personal «/var/lib/sss» no pertenece al usuario que está creando."
(translation: adduser: Warning: The personal directory «/var/lib/sss» doesn't belong to the user that is being created).
I can tell that it's true; the directory /var/lib/sss is owned by root instead of sssd. sss/deskprofile directory that is also owned by root.
All the directories and files inside /var/lib/sss are owned by sssd user except /var/lib/
Probably not a problem, but may be also patched.
I can't tell about the warning messages related to apparmor.