LDAP configuration file

When you use the SET AUTHENTICATION command to change from local to LDAP authentication, the command creates a backup copy of /etc/sssd/sssd.conf, and saves it as /etc/sssd/sssd.conf.orig and then creates the /etc/sssd/sssd.conf with 0600 permissions for the settings that are specified in the SET AUTHENTICATION command.

It is advised not to manually edit or modify the sssd.conf file, as changes can affect LDAP authentication and user access to Netezza Performance Server for Cloud Pak for Data System.

The SET AUTHENTICATION command does not use any of the settings from previous command instances. Make sure that you specify all the arguments that you require when you use the SET AUTHENTICATION command.

Note: After you change to LDAP authentication, if you later decide to return to local authentication, you can use the SET AUTHENTICATION LOCAL command to restore the default behavior. The Netezza Performance Server system then starts to use local authentication, which requires user accounts with passwords on the Netezza Performance Server system. If you have Netezza Performance Server user accounts with no passwords or accounts that were created with a NULL password, use the ALTER USER command to update each user account with a password.