# Linux01 SSSD Remediation Validation

## Claim supported

Direct Linux01 remediation evidence supports a narrow Linux01-only SSSD responder/socket conflict remediation and post-remediation validation.

## Directly observed values

- Initial condition: SSSD NSS, PAM, and PAC sockets were enabled and failed.
- Initial condition: SSSD was configured for direct responder activation through `services = nss, pam`.
- Initial condition: `config_file_version = 2` was rejected by SSSD 2.12 config validation.
- Remediation action: removed only the rejected `config_file_version = 2` directive.
- Remediation action: disabled conflicting NSS, PAM, and PAC sockets.
- Remediation action: restarted sssd.service.
- Remediation action: cleared failed-unit state.
- Post-remediation service state: sssd.service enabled and active/running.
- Post-remediation failed-unit state: zero failed units.
- SSSD configuration validation: passed.
- AD identity lookup: passed.
- New AD-authenticated SSH session: passed.
- Initial diagnostic SHA-256: 3CAD0FB73202D777D41DEE40D6F4D19D4019B9AD30552B37970B55A5CA5AB3BB.
- Original/backup configuration SHA-256: 23ACE1BECA5FF6F7D58200EFE054EA8E5A938E02F37FCE25B1CA1B5D2F05BD14.
- Post-remediation diagnostic SHA-256: FD55604BFB94487B86FBF631703FA995B9726471689385CCB2D277492AA7CBEE.

## Source command or source object

Linux01 SSSD remediation evidence record.

## Source repository

fontenotjeremy71-hub/jeremy-homelab-ops

## Source commit

fb6c286873285778d88d6d5cfde0b9bd00b96f36

## Source path

`evidence/linux01-sssd-remediation-20260626-110159.md`

## Source file SHA-256

`evidence/linux01-sssd-remediation-20260626-110159.md`: 04773570FBE305353F5EB370B8F9629AC335E35A7BEF7151A2CBB98D7371CC49

## Public artifact SHA-256

Recorded in `evidence-library/integrity/evidence-hashes.json` for this artifact path. The self-hash is recorded outside this file so the digest does not invalidate itself.

## Sanitization performed

Removed diagnostic artifact paths, backup filesystem path, account context, raw command history, and implementation details not needed to support the remediation claim. Retained hashes because they are part of the validation evidence.

## Limitations

- Personal nonproduction home lab only.
- Captured-state evidence only.
- Linux01 only.
- This does not claim that all Linux domain-authentication paths were tested.
- This does not prove production readiness, employer-system administration, or recurring assurance.

## Validation date

2026-06-30

## Classification

Validated