On 22/01/16 16:02, Rob Owens wrote:
> One thing it can be used for is offline authentication for LDAP users. I am
> currently using sssd on a Funtoo laptop for this purpose. When I have no
> network access (no access to the LDAP server), my users can still log in.
>

As I said, I cannot think of anything that sssd can do that winbind
doesn't, or to put it it another way, you can do that with winbind. See
here: https://wiki.samba.org/index.php/PAM_Offline_Authentication

Rowland