[Pkg-sssd-devel] Bug#1120800: sssd-idp: sssd_krb5_idp_plugin.so wrong path set in /etc/krb5.conf.d/sssd_enable_idp
Andrea Janna
andrea.d1 at dpss.psy.unipd.it
Sun Nov 16 13:47:14 GMT 2025
Package: sssd-idp
Version: 2.10.1-2+b1
Severity: normal
The library file sssd_krb5_idp_plugin.so path is /usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_idp_plugin.so
But in the shipped configuration file /etc/krb5.conf.d/sssd_enable_idp the library path is set to /usr/lib64/sssd/modules/sssd_krb5_idp_plugin.so so the authentication to external identity providers fails: when the user tries to login pam_sss.so authentication module doesn't print authentication instructions at the login prompt.
As a workaround I created the following symlink:
ln -s ../lib/x86_64-linux-gnu/sssd /usr/lib64/sssd
In this way the authentication to external identity providers works.
-- System Information:
Debian Release: 13.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.57+deb13-amd64 (SMP w/3 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages sssd-idp depends on:
ii libc6 2.41-12
ii libcom-err2 1.47.2-3+b3
ii libcurl4t64 8.14.1-2+deb13u2
ii libjansson4 2.14-2+b3
ii libjose0 14-2
ii libkrad0 1.21.3-5
ii libkrb5-3 1.21.3-5
ii libpopt0 1.19+dfsg-2
ii libtalloc2 2:2.4.3+samba4.22.6+dfsg-0+deb13u1
ii sssd-common 2.10.1-2+b1
sssd-idp recommends no packages.
sssd-idp suggests no packages.
-- no debconf information
More information about the Pkg-sssd-devel
mailing list