Make sure that SSSD service is configured and enabled. See SSSD documentation for more information.
{include if "with-smartcard"}
- with-smartcard is selected, make sure smartcard authentication is enabled in sssd.conf: {include if "with-smartcard"}
- set "pam_cert_auth = True" in [pam] section {include if "with-smartcard"}
{include if "with-fingerprint"}
- with-fingerprint is selected, make sure fprintd service is configured and enabled {include if "with-fingerprint"}
{include if "with-pam-gnome-keyring"}
- with-pam-gnome-keyring is selected, make sure the pam_gnome_keyring module {include if "with-pam-gnome-keyring"}
is present. {include if "with-pam-gnome-keyring"}
{include if "with-pam-u2f"}
- with-pam-u2f is selected, make sure that the pam u2f module is installed {include if "with-pam-u2f"}
- users can then configure keys using the pamu2fcfg tool {include if "with-pam-u2f"}
{include if "with-pam-u2f-2fa"}
- with-pam-u2f-2fa is selected, make sure that the pam u2f module is installed {include if "with-pam-u2f-2fa"}
- users can then configure keys using the pamu2fcfg tool {include if "with-pam-u2f-2fa"}
{include if "with-mkhomedir"}
- with-mkhomedir is selected, make sure pam_oddjob_mkhomedir module {include if "with-mkhomedir"}
is present and oddjobd service is enabled and active {include if "with-mkhomedir"}
- systemctl enable --now oddjobd.service {include if "with-mkhomedir"}
{include if "with-files-domain"}
- with-files-domain is selected, make sure the files provider is enabled in SSSD {include if "with-files-domain"}
- set enable_files_domain=true in [sssd] section of /etc/sssd/sssd.conf {include if "with-files-domain"}
- or create a custom domain with id_provider=files {include if "with-files-domain"}
{include if "with-gssapi"}
- with-gssapi is selected, make sure that GSSAPI authenticaiton is enabled in SSSD {include if "with-gssapi"}
- set pam_gssapi_services to a list of allowed services in /etc/sssd/sssd.conf {include if "with-gssapi"}
- see additional information in pam_sss_gss(8) {include if "with-gssapi"}
