• Logo
    Ubuntu Server
  • ubuntu.com/server
  • More resources
    • Discourse
    • Mattermost
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Ubuntu Server documentation
Ubuntu Server documentation
  • Tutorial
    • Basic installation
    • Managing your software
    • Attach your Ubuntu Pro subscription
  • How-to guides
    • Server installation
      • amd64 netboot install
      • arm64 netboot install
      • ppc64el netboot install
      • Virtual CD-ROM and Petitboot install on ppc64el
      • s390x install via z/VM
      • Non-interactive IBM z/VM autoinstall (s390x)
      • s390x install via LPAR
      • Non-interactive IBM Z LPAR autoinstall (s390x)
    • Virtualisation
      • QEMU
      • Multipass
      • UVtool
      • Libvirt and virsh
      • virt-manager
      • Nested virtualization
      • Ubuntu on Hyper-V
    • Containers
      • LXD
      • Docker for sysadmins
      • How to run rocks on your server
    • Networking
      • Network File System (NFS)
      • File Transfer Protocol (FTP)
      • Domain Name Service (DNS)
      • DNS Security Extensions (DNSSEC)
      • DNSSEC Troubleshooting
      • Use Open vSwitch with DPDK
      • Install isc-kea
      • Install isc-dhcp-server
      • Synchronise time
      • Serve the NTP
      • Set up a CUPS print server
    • Samba
      • Samba AD Domain Controller
      • Join Active Directory
      • Set up a file server
      • Set up a print server
      • Share access controls
      • Create AppArmor profile
      • Mount CIFS shares permanently
      • NT4 domain controller
      • OpenLDAP backend
    • Active Directory integration
      • Prepare to join a domain
      • Join a simple domain with the rid backend
      • Join a forest with the rid backend
      • Join a forest with the autorid backend
    • Kerberos
      • Install a Kerberos server
      • Configure service principals
      • Kerberos encryption types
      • Set up secondary KDC
      • Basic workstation authentication
      • Kerberos with OpenLDAP backend
    • Network user authentication with SSSD
      • SSSD with Active Directory
      • SSSD with LDAP
      • SSSD with LDAP and Kerberos
      • Troubleshooting SSSD
    • OpenLDAP
      • Install LDAP
      • Set up access control
      • Replication
      • LDAP users and groups
      • LDAP and TLS
      • Backup and restore
    • Databases
      • MySQL
      • PostgreSQL
    • Mail services
      • Install Postfix
      • Install Dovecot
      • Install Exim4
    • Backups and version control
      • Install Bacula
      • Install rsnapshot
      • Backup with shell scripts
      • etckeeper
      • Install gitolite
    • Web services
      • Install a Squid server
      • Install Apache2
      • Apache2 settings
      • Apache2 modules
      • Install nginx
      • nginx settings
      • nginx modules
      • Install PHP
      • Install Ruby on Rails
    • Storage
      • Manage logical volumes
    • Graphics
      • Install NVIDIA drivers
      • vGPU with QEMU/KVM
    • Managing software
      • Package management
      • Automatic updates
      • Upgrade your release
      • Reporting bugs
      • Kernel crash dump
    • Security
      • OpenSSH
      • Two factor authentication with U2F/FIDO
      • Two factor authentication with TOTP/HOTP
      • OpenVPN
      • CA trust store
      • Firewall
      • AppArmor
      • Smart card authentication
      • Smart card SSH
      • User management
      • Console security
    • WireGuard VPN
      • Peer-to-site
      • Peer-to-site (on router)
      • Peer-to-site (inside device)
      • Site-to-site
      • Default gateway
      • Common tasks
      • Security tips
      • Troubleshooting
    • High availability
      • Distributed Replicated Block Device (DRBD)
    • Observability
      • Set up your LMA stack
      • Install Logwatch
      • Install Munin
      • Install Nagios Core 3
      • Use Nagios with Munin
  • Reference
    • Server installation
      • System requirements
    • Clouds
      • Cloud images
    • High availability
      • Migrate from crmsh to pcs
    • Backups and version control
      • Archive rotation shell script
    • Debugging
      • About debuginfod
      • Debug symbol packages
    • Other tools
      • Byobu
      • pam_motd
    • Glossary
  • Explanation
    • Introduction to…
      • Virtualization
      • Networking
      • Samba
      • Active Directory integration
      • Device mapper multipathing
      • Kerberos
      • SSSD
      • OpenLDAP
      • Security
      • Cryptographic libraries
      • WireGuard VPN
      • Mail servers
      • Web servers
      • Backups
      • Databases
      • High Availability
      • eBPF
      • Cloud-init
    • Virtualisation and containers
      • VM tools overview
      • QEMU microvm
      • Upgrade VM machine type
      • About OpenStack
      • Container tools overview
      • About rock images
      • Docker storage, networking, and logging
    • Networking
      • Networking key concepts
      • Configuring networks
      • About Netplan
      • About DHCP
      • Time synchronisation
      • The DPDK library
    • Active Directory integration
      • Choosing an integration method
      • Security identifiers (SIDs)
      • Identity Mapping (idmap) backends
      • The rid idmap backend
      • The autorid idmap backend
    • Security
      • Security suggestions
      • OpenVPN clients
      • Certificates
      • DNSSEC
    • Cryptography
      • OpenSSL
      • GnuTLS
      • Network Security Services (NSS)
      • Java cryptography configuration
      • BIND 9 DNSSEC cryptography selection
      • OpenSSH crypto configuration
      • Troubleshooting TLS/SSL
    • Server installation
      • Choosing between the arm64 and arm64+largemem installer options
    • Storage
      • About LVM
      • iSCSI
    • Managing software
      • About apt upgrade and phased updates
      • Third party repository usage
      • Changing package files
      • Advance testing of updates in best practice server deployments
      • Configuration managers
    • Web services
      • About web servers
      • About Squid proxy servers
    • Performance
      • Profile-Guided Optimization
      • hwloc
      • cpupower
      • TuneD
    • High availability
      • Pacemaker resource agents
      • Pacemaker fence agents
    • Multipath
      • Configuration options and overview
      • Configuration examples
      • Common tasks and procedures
  • Contributing
    • Contribute to this documentation
    • Types of contributions
    • Find issues to work on
    • Build the documentation locally
    • Guidance for writing
    • Submitting your work
    • Getting help
    • Our contributors
Back to top
View this page

Network user authentication with SSSD¶

These guides will show you how to set up network user authentication with SSSD with…

  • Active Directory

  • LDAP

  • LDAP and Kerberos

If you run into difficulties, you may want to check out Troubleshooting SSSD.

Copyright © 2025, Canonical Group Ltd
Last updated on Mar 31, 2025
Show source
Thanks to our contributor!
  • Sally
Ask a question on Discourse
Ask a question on Mattermost
Ask a question on IRC
Open a GitHub issue for this page
Edit this page on GitHub
Contents
  • Network user authentication with SSSD