SSSD / Active Directory authentication to Webmin

Webmin
4

Right, so I finally managed to get this working. Most definitely Webmin doesn’t work with this “by default”. If it does there there are probably some hidden requirements, but that’s a different discussion.

To get this working:

  1. I had to make the following change to /etc/sudo.conf:
echo "Set group_source dynamic" >> /etc/sudo.conf

I got the solution from this forum post. This is probably the main problem point.

  1. In my case for some reason the PAM webmin setup was missing (/etc/pam.d/webmin), so I’ve had to recreate it:
#%PAM-1.0
@include common-auth
@include common-account
@include common-password
@include common-session

Initially I’ve taken inspiration from this forum post and replaced the ldap modules with sss modules instead, which worked. However after I’ve installed Webmin on another server the above defaults were placed there, and I was able to sign in with these default values without the need to change the config.

With these two changes I was finally able sign into Webmin with my AD credentials.

1 Like