----- Original Message -----
> From: "Rowland Penny" <rpenny241155@???>
> On 22/01/16 16:02, Rob Owens wrote:
>> One thing it can be used for is offline authentication for LDAP users. I am
>> currently using sssd on a Funtoo laptop for this purpose. When I have no
>> network access (no access to the LDAP server), my users can still log in.
>>
>
> As I said, I cannot think of anything that sssd can do that winbind
> doesn't, or to put it it another way, you can do that with winbind. See
> here: https://wiki.samba.org/index.php/PAM_Offline_Authentication
>

It looks like I'd need to have a Windows domain (could be via Samba) to
make that work. Is that correct? I've got Linux-only LDAP authentication,
so I'm not using a domain.

-Rob