System Security Services Daemon
The combination of NSS and PAM allows great flexibility but can also make common scenarios hard to configure and maintain. The SSSD project strives to simplify that process by coordinating the interaction of both PAM and NSS with remote databases.
One source of configuration complexity for single sign-on schemes is that they usually involve multiple components and protocols, such as LDAP for storing user information and Kerberos for issuing and checking cryptographic authentication tickets, plus a way to discover those services, typically via special DNS records. SSSD has built-in support for popular SSO schemes such as Microsoft Active Directory and FreeIPA, which greatly simplifies the process.
For this demonstration, we will set up a Microsoft Active Directory-compatible domain controller on Linux using the Samba project and then make a client machine join its domain. We will use Fedora Linux on both, but other distributions would mostly differ...
