While troubleshooting privilege escalation on a Fedora workstation that is joined to an Active Directory (AD) domain through SSSD, you observe the following behavior: when an unprivileged user opens GNOME Settings and attempts to set the system clock, a window appears requesting the user's password. After the password is entered, the time change succeeds.
Which pair of components is responsible for (1) showing that password prompt and (2) validating the password against the AD domain?
The graphical dialog that appears is launched by a polkit authentication agent. Polkit mediates authorization requests coming from privileged system services and, when additional confirmation is required, it calls an agent running in the user session to prompt for credentials. Once the user supplies a password, polkit passes the credentials to the host's native authentication system through PAM. In a system that is enrolled in Active Directory through SSSD, the relevant PAM stack includes the pam_sss module, which forwards the credentials to the SSSD daemon; SSSD then communicates with Kerberos and LDAP on the domain controller to verify the user. GNOME Shell does not perform authentication itself, Kerberos libraries are called indirectly through SSSD rather than directly by PAM, and components such as libvirt or pam_unix do not participate in this desktop privilege-escalation workflow.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Polkit, and what is its function in the context of authentication?
Open an interactive chat with Bash
What is SSSD, and how does it integrate with Active Directory for authentication?
Open an interactive chat with Bash
What is the role of the PAM stack, especially the pam_sss module, in authentication workflows?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access