News for hackers. Stuff that matters.

A comment on Native FreeBSD Kerberos/LDAP with FreeIPA/IDM. Parent comment

Re:Native FreeBSD Kerberos/LDAP with FreeIPA/IDM by xorcist on Wednesday February 18, 2026 @01:08PM (#47064089)
I don't think it's exactly the same thing as sssd is primarily a cache. You can use pam_krb5 on Linux too. But can you disconnect your FreeBSD laptop and work as normal from cache? I agree that sssd is quite finicky however, and I'd love a simpler alternative.
[ Parent | on HN ]
Re:Native FreeBSD Kerberos/LDAP with FreeIPA/IDM by cullumsmith on Wednesday February 18, 2026 @02:10PM (#47064978)
You are correct, sssd has a ton of features (like basically replicating the entire domain locally and caching passwords so you can roam away from your corp network). If you need those things, you need sssd.
[ Parent | on HN ]
Re:Native FreeBSD Kerberos/LDAP with FreeIPA/IDM by xorcist on Friday February 20, 2026 @05:10AM (#47086000)
It is a quite normal need. An always-on laptop that doesn't leave the corporate network is just a stationary computer in inconvenient packaging.
[ Parent | on HN ]