A RHEL 9 server has been joined to the corp.example.com Active Directory realm with realmd, and domain users are authenticating through SSSD. A new policy states that only members of the AD security group LinuxAdmins may obtain an interactive login on this host. The control must be implemented in SSSD (not in PAM or sshd).
Which modification to /etc/sssd/sssd.conf will enforce the requirement after the file is saved and SSSD is restarted?
Add simple_allow_groups = LinuxAdmins in the domain stanza and leave the existing access_provider unchanged
Under [domain/corp.example.com] add: access_provider = ad ad_access_filter = (memberOf=CN=LinuxAdmins,OU=Groups,DC=corp,DC=example,DC=com)
Set enumeration = true in the [sssd] section so SSSD can list the LinuxAdmins group
Disable credential caching by setting cache_credentials = false in the [sssd] section
SSSD can perform access control itself. When the access provider for a domain is set to ad, adding an ad_access_filter limits logins to entries that match the supplied LDAP filter. Inserting the two lines shown in the correct option restricts access to users whose memberOf attribute contains the LinuxAdmins group DN.
Enabling enumeration (option 2) only causes SSSD to list all users and groups; it does not control logins. Adding simple_allow_groups without switching the provider to simple (option 3) has no effect, because the simple access lists are ignored when another provider is active. Disabling credential caching (option 4) merely forces online authentication and does not restrict which identities can log in.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the role of realmd in joining a RHEL server to an AD realm?
Open an interactive chat with Bash
What is SSSD and why is it used in this setup?
Open an interactive chat with Bash
How does the ad_access_filter in SSSD work with LDAP?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access