[Pkg-sssd-devel] Bug#1120800: sssd-idp: sssd_krb5_idp_plugin.so wrong path set in /etc/krb5.conf.d/sssd_enable_idp

Andrea Janna andrea.d1 at dpss.psy.unipd.it
Sun Nov 16 13:47:14 GMT 2025


Package: sssd-idp
Version: 2.10.1-2+b1
Severity: normal

The library file sssd_krb5_idp_plugin.so path is /usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_idp_plugin.so
But in the shipped configuration file /etc/krb5.conf.d/sssd_enable_idp the library path is set to /usr/lib64/sssd/modules/sssd_krb5_idp_plugin.so so the authentication to external identity providers fails: when the user tries to login pam_sss.so authentication module doesn't print authentication instructions at the login prompt.

As a workaround I created the following symlink:
ln -s ../lib/x86_64-linux-gnu/sssd /usr/lib64/sssd
In this way the authentication to external identity providers works.


-- System Information:
Debian Release: 13.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.57+deb13-amd64 (SMP w/3 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sssd-idp depends on:
ii  libc6        2.41-12
ii  libcom-err2  1.47.2-3+b3
ii  libcurl4t64  8.14.1-2+deb13u2
ii  libjansson4  2.14-2+b3
ii  libjose0     14-2
ii  libkrad0     1.21.3-5
ii  libkrb5-3    1.21.3-5
ii  libpopt0     1.19+dfsg-2
ii  libtalloc2   2:2.4.3+samba4.22.6+dfsg-0+deb13u1
ii  sssd-common  2.10.1-2+b1

sssd-idp recommends no packages.

sssd-idp suggests no packages.

-- no debconf information



More information about the Pkg-sssd-devel mailing list