Local user login fails if sssd is not running

[Myllynen]

This upstream issue also affects all Ubuntu sssd packages:

https://fedorahosted.org/sssd/ticket/1011

[Myllynen (myllynen)]

There is a workaround for this issue. If

account sufficient pam_localuser.so

is added before the pam_sss.so line (as is the case on Fedora/RHEL) the SSSD does not affect local user logins any more.

[Timo Aaltonen (tjaalton)]

Actually, local users (uid >999) weren't allowed to log in with the default config anyway, since it only allows uid's 500->999. So pam_localuser.so is needed anyway.

[Launchpad Janitor (janitor)]

This bug was fixed in the package sssd - 1.5.13-0ubuntu1

---------------
sssd (1.5.13-0ubuntu1) oneiric; urgency=low

  * FFE: New upstream release. (LP: #860297)
    - control: Add libunistring-dev to build-depends.
    - sssd.install: Include libipa_hbac.so*.
  * Rebuild against current libldb1, and use the multiarch path
    for libldb modules. (LP: #746981)
  * sssd.default:
    - Move the option to run as daemon here.
    - Add option that makes the daemon to use logfiles. (LP: #859602)
  * sssd.upstart:
    - Don't start before net-device-up. (LP: #812943)
    - Source /etc/default/sssd. (LP: #812943)
  * rules: Install the Python API files to /usr/share/sssd, as discussed
    with upstream. (LP: #859611)
  * fix-python-api-path.dpatch: Use the new location for the API files.
    (LP: #859611)
  * libpam-sss.pam-auth-update:
    - Add 'forward_pass' to auth stack to fix ecryptfs mounts. (LP: #826643)
    - Add pam_localuser.so to account stack to allow local users to log in.
      (LP: #860488)
  * control: sssd now Recommends libpam-sss and libnss-sss, since sssd is
    mostly useless without them. (LP: #767337)
 -- Timo Aaltonen <email address hidden> Tue, 27 Sep 2011 06:03:41 +0300