• Logo
    Ubuntu Server
  • ubuntu.com/server
  • More resources
    • Discourse
    • Mattermost
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Ubuntu Server documentation
Ubuntu Server documentation
  • Tutorial
    • Basic installation
    • Managing your software
    • Attach your Ubuntu Pro subscription
  • How-to guides
    • Server installation
      • amd64 netboot install
      • arm64 netboot install
      • Choose between the arm64 and arm64+largemem installer options
      • ppc64el netboot install
      • Virtual CD-ROM and Petitboot install on ppc64el
      • s390x install via z/VM
      • Non-interactive IBM z/VM autoinstall (s390x)
      • s390x install via LPAR
      • Non-interactive IBM Z LPAR autoinstall (s390x)
    • Security
      • User management
      • Firewalls
      • AppArmor
      • Console security
      • Kerberos
        • Install a Kerberos server
        • Configure service principals
        • Kerberos encryption types
        • Set up secondary KDC
        • Basic workstation authentication
        • Kerberos with OpenLDAP backend
      • Network user authentication with SSSD
        • SSSD with Active Directory
        • SSSD with LDAP
        • SSSD with LDAP and Kerberos
        • Troubleshooting SSSD
      • Smart cards
        • Smart card authentication
        • Smart card authentication with SSH
      • OpenSSH
        • OpenSSH server
        • 2FA with TOTP/HOTP
        • 2FA with U2F/FIDO
      • Install a root CA certificate
      • OpenVPN
      • WireGuard VPN
        • Peer-to-site
          • Peer-to-site (on router)
          • Peer-to-site (inside device)
        • Site-to-site
        • Default gateway
        • Common tasks
        • Security tips
        • Troubleshooting
    • Networking
      • File transfers with FTP
      • Set up a name server (DNS)
      • Set up DNS Security Extensions (DNSSEC)
      • DNSSEC Troubleshooting
      • Use Open vSwitch with DPDK
      • Install DHCP isc-kea
      • Install DHCP isc-dhcp-server
      • Time sync with timedatectl and timesyncd
      • Time sync with chrony
      • Network File System (NFS) sharing
      • Samba
        • Set up a Samba AD Domain Controller
        • Join an Active Directory domain
        • Set up a file server
        • Set up a print server
        • Share access controls
        • Create AppArmor profile
        • Mount CIFS shares permanently
        • NT4 domain controller
        • OpenLDAP backend
      • Active Directory integration
        • Prepare to join a domain
        • Join a simple domain with the rid backend
        • Join a forest with the rid backend
        • Join a forest with the autorid backend
      • Set up a CUPS print server
    • Managing software
      • Package management
      • Automatic updates
      • Upgrade your release
      • Reporting bugs
      • Kernel crash dump
    • Data and storage
      • OpenLDAP
        • Install OpenLDAP
        • Set up access control
        • OpenLDAP with replication
        • User and group management
        • OpenLDAP and TLS
        • Backup and restore
      • Databases
        • MySQL
        • PostgreSQL
      • Storage
        • Manage logical volumes
        • iSCSI
      • Backups and version control
        • Install Bacula
        • Install rsnapshot
        • Backup with shell scripts
        • etckeeper
        • Install gitolite
    • Mail services
      • Install Postfix
      • Install Exim4
      • Install Dovecot
    • Web services
      • Install a Squid server
      • Install Apache2
      • Apache2 settings
      • Apache2 modules
      • Install nginx
      • nginx settings
      • nginx modules
      • Install PHP
      • Install Ruby on Rails
    • Graphics
      • Install NVIDIA drivers
      • vGPU with QEMU/KVM
    • Virtualisation
      • QEMU
      • Multipass
      • UVtool
      • Libvirt and virsh
      • virt-manager
      • Nested virtualization
      • Ubuntu on Hyper-V
    • Containers
      • LXD
      • Docker for sysadmins
      • How to run rocks on your server
    • High availability
      • Distributed Replicated Block Device (DRBD)
    • Observability
      • Set up your LMA stack
      • Install Logwatch
      • Install Munin
      • Install Nagios Core 3
      • Use Nagios with Munin
  • Reference
    • Glossary
    • System requirements
    • Data and storage
      • Archive rotation shell script
    • High availability
      • Migrate from crmsh to pcs
    • Other tools
      • Byobu
      • pam_motd
  • Explanation
    • Security
      • Introduction to security
      • Security suggestions
      • Introduction to Kerberos
      • Introduction to network user authentication with SSSD
      • DNSSEC
      • Cryptography
        • Introduction to cryptographic libraries
        • OpenSSL
        • GnuTLS
        • Network Security Services (NSS)
        • Java cryptography configuration
        • BIND 9 DNSSEC cryptography selection
        • OpenSSH crypto configuration
        • Troubleshooting TLS/SSL
      • Certificates
      • Introduction to WireGuard VPN
      • OpenVPN clients
    • Networking
      • Introduction to networking
      • Networking key concepts
      • About Netplan
      • Configuring networks
      • The DPDK library
      • About DHCP
      • Time synchronisation
      • Introduction to Samba
      • Active Directory integration
        • Introduction to Active Directory integration
        • Choosing an integration method
        • Security identifiers (SIDs)
        • Identity Mapping (idmap) backends
        • The rid idmap backend
        • The autorid idmap backend
    • Managing software
      • Third party repository usage
      • Changing package files
      • Configuration managers
      • About apt upgrade and phased updates
      • Advance testing of updates in best practice server deployments
    • Data and storage
      • Introduction to OpenLDAP
      • Introduction to databases
      • Storage
        • About LVM
      • Multipath
        • Introduction to device mapper multipathing (“multipath”)
        • Configuration options and overview
        • Configuration examples
        • Common tasks and procedures
      • Introduction to backups
    • Web services
      • Introduction to web servers
      • About web servers
      • About Squid proxy servers
    • Virtualisation and containers
      • Introduction to virtualization
      • VM tools overview
      • QEMU microvm
      • Upgrade VM machine type
      • Container tools overview
      • About rock images
      • Docker storage, networking, and logging
      • About OpenStack
      • eBPF
    • Clouds
      • About cloud-init
      • Cloud images
    • Performance
      • Profile-Guided Optimization
      • hwloc
      • cpupower
      • TuneD
    • High Availability
      • Introduction to HA
      • Pacemaker resource agents
      • Pacemaker fence agents
    • Debugging
      • About debuginfod
      • Debug symbol packages
  • Contributing
    • Contribute to this documentation
    • Types of contributions
    • Find issues to work on
    • Build the documentation locally
    • Guidance for writing
    • Submitting your work
    • Getting help
    • Our contributors
Back to top
View this page

Network user authentication with SSSD¶

These guides will show you how to set up network user authentication with SSSD with…

  • SSSD with Active Directory
  • SSSD with LDAP
  • SSSD with LDAP and Kerberos

If you run into difficulties, refer to our troubleshooting guide.

  • Troubleshooting SSSD

See also¶

  • Explanation: Introduction to network user authentication with SSSD

Copyright © 2025, Canonical Group Ltd
Last updated on Apr 25, 2025
Show source
Thanks to our contributor!
  • Sally
Ask a question on Discourse
Ask a question on Mattermost
Ask a question on IRC
Open a GitHub issue for this page
Edit this page on GitHub
Contents
  • Network user authentication with SSSD
    • See also