A RHEL 9 server has been joined to the corp.example.com Active Directory realm with realmd, and domain users are authenticating through SSSD. A new policy states that only members of the AD security group LinuxAdmins may obtain an interactive login on this host. The control must be implemented in SSSD (not in PAM or sshd).
Which modification to /etc/sssd/sssd.conf will enforce the requirement after the file is saved and SSSD is restarted?
Set enumeration = true in the [sssd] section so SSSD can list the LinuxAdmins group
Add simple_allow_groups = LinuxAdmins in the domain stanza and leave the existing access_provider unchanged
Under [domain/corp.example.com] add: access_provider = ad ad_access_filter = (memberOf=CN=LinuxAdmins,OU=Groups,DC=corp,DC=example,DC=com)
Disable credential caching by setting cache_credentials = false in the [sssd] section
SSSD can perform access control itself. When the access provider for a domain is set to ad, adding an ad_access_filter limits logins to entries that match the supplied LDAP filter. Inserting the two lines shown in the correct option restricts access to users whose memberOf attribute contains the LinuxAdmins group DN.
Enabling enumeration (option 2) only causes SSSD to list all users and groups; it does not control logins. Adding simple_allow_groups without switching the provider to simple (option 3) has no effect, because the simple access lists are ignored when another provider is active. Disabling credential caching (option 4) merely forces online authentication and does not restrict which identities can log in.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the role of realmd in joining a RHEL server to an AD realm?
Open an interactive chat with Bash
What is SSSD and why is it used in this setup?
Open an interactive chat with Bash
How does the ad_access_filter in SSSD work with LDAP?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .