KOKINIO - MANAGER
Edit File: sssd-pam.service
[Unit] Description=SSSD PAM Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service RefuseManualStart=true [Install] Also=sssd-pam.socket [Service] Environment=DEBUG_LOGGER=--logger=files EnvironmentFile=-/etc/sysconfig/sssd ExecStart=/usr/libexec/sssd/sssd_pam ${DEBUG_LOGGER} --socket-activated # 'CAP_DAC_READ_SEARCH' is granted as permitted file capability to be elevated to establish GSS API context CapabilityBoundingSet= CAP_DAC_READ_SEARCH Restart=on-failure User=sssd Group=sssd # If service configured to be run under "root", uncomment "SupplementaryGroups" #SupplementaryGroups=sssd