While troubleshooting privilege escalation on a Fedora workstation that is joined to an Active Directory (AD) domain through SSSD, you observe the following behavior: when an unprivileged user opens GNOME Settings and attempts to set the system clock, a window appears requesting the user's password. After the password is entered, the time change succeeds.
Which pair of components is responsible for (1) showing that password prompt and (2) validating the password against the AD domain?
(1) Polkit authentication agent, (2) PAM stack that calls pam_sss/SSSD
The graphical dialog that appears is launched by a polkit authentication agent. Polkit mediates authorization requests coming from privileged system services and, when additional confirmation is required, it calls an agent running in the user session to prompt for credentials. Once the user supplies a password, polkit passes the credentials to the host's native authentication system through PAM. In a system that is enrolled in Active Directory through SSSD, the relevant PAM stack includes the pam_sss module, which forwards the credentials to the SSSD daemon; SSSD then communicates with Kerberos and LDAP on the domain controller to verify the user. GNOME Shell does not perform authentication itself, Kerberos libraries are called indirectly through SSSD rather than directly by PAM, and components such as libvirt or pam_unix do not participate in this desktop privilege-escalation workflow.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Polkit, and what is its function in the context of authentication?
Open an interactive chat with Bash
What is SSSD, and how does it integrate with Active Directory for authentication?
Open an interactive chat with Bash
What is the role of the PAM stack, especially the pam_sss module, in authentication workflows?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .