What I did was:vim /etc/sysconfig/authconfig        USESSSDAUTH=yes        USESSSD=yes        FORCELEGACY=noThen:authconfig --enablesssd --enablesssdauth --enablelocauthorize --updateauthconfig --enableldap --enableldapauth --ldapserver=ipa.example.com --ldapbasedn=dc=example,dc=com --enablerfc2307bis --enableldaptls --updateauthconfig --enablemkhomedir --enablecachecreds --updateauthconfig --enablekrb5 --krb5kdc=ipa.example.com --krb5adminserver=ipa.example.com --krb5realm=EXAMPLE.COM --updateauthconfig --enablekrb5kdcdns --enablekrb5realmdns --updateafter that I have addedldap_tls_reqcert = neverto /etc/sssd/sssd.confFor some unknown reason, the server still using nslcd to authentication.If am inside root user and trying tosu - LDAPuserit works.However, when I am inside normal user (local user), and I am trying to su into LDAP user, I am getting:su: Authentication service cannot retrieve authentication infoby looking atsystemctl status nslcd -lJul 24 13:18:21 server2.example.com nslcd[74273]: [482a97] <group/member=shaked> no available LDAP server found: Server is unavailable: Resource temporarily unavailableJul 24 13:18:25 server2.example.com nslcd[74273]: [63b9ea] <group/member=root> no available LDAP server found: Server is unavailable: Resource temporarily unavailable^^^ shaked is my local usersystemctl status sssd -l^^^ doesn't give any errorsThe content of /etc/nsswitch.confpasswd:     files sss ldapshadow:     files sss ldapgroup:      files sss ldaphosts:      files dnsbootparams: nisplus [NOTFOUND=return] filesethers:     filesnetmasks:   filesnetworks:   filesprotocols:  filesrpc:        filesservices:   files sssnetgroup:   files sss ldappublickey:  nisplusautomount:  files sss ldapaliases:    files nisplusMy OS is CentOS 7.
Force authentication to use sssd not nslcd
centos;authentication;sssd