On 22/01/16 17:38, Rob Owens wrote:
> ----- Original Message -----
>> From: "Rowland Penny" <rpenny241155@???>
>> On 22/01/16 16:02, Rob Owens wrote:
>>> One thing it can be used for is offline authentication for LDAP users. I am
>>> currently using sssd on a Funtoo laptop for this purpose. When I have no
>>> network access (no access to the LDAP server), my users can still log in.
>>>
>> As I said, I cannot think of anything that sssd can do that winbind
>> doesn't, or to put it it another way, you can do that with winbind. See
>> here: https://wiki.samba.org/index.php/PAM_Offline_Authentication
>>
> It looks like I'd need to have a Windows domain (could be via Samba) to
> make that work. Is that correct? I've got Linux-only LDAP authentication,
> so I'm not using a domain.
>
>

Whilst it does work with an AD domain, I am sure it will work with a
samba ldap system. If you look at the bottom of the page I linked to, it
was last updated in 2007 and Samba 4 didn't exist then :-)

Rowland