#1120800 sssd-idp: sssd_krb5_idp_plugin.so wrong path set in /etc/krb5.conf.d/sssd_enable_idp

Package:
sssd-idp
Source:
sssd-idp
Description:
System Security Services Daemon -- Kerberos plugins for external id providers
Submitter:
Andrea Janna
Date:
2025-11-16 13:57:02 UTC
Severity:
normal
#1120800#5
Date:
2025-11-16 13:47:14 UTC
From:
To:
The library file sssd_krb5_idp_plugin.so path is /usr/lib/x86_64-linux-gnu/sssd/modules/sssd_krb5_idp_plugin.so
But in the shipped configuration file /etc/krb5.conf.d/sssd_enable_idp the library path is set to /usr/lib64/sssd/modules/sssd_krb5_idp_plugin.so so the authentication to external identity providers fails: when the user tries to login pam_sss.so authentication module doesn't print authentication instructions at the login prompt.

As a workaround I created the following symlink:
ln -s ../lib/x86_64-linux-gnu/sssd /usr/lib64/sssd
In this way the authentication to external identity providers works.