Systemd: PAM unable to dlopen(/usr/lib64/security/pam_sss.so)

Issue

We've spotted this line being logged quite frequently on the CloudLinux servers:

systemd: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: cannot open shared object file: No such file or directory

Noticed that SSSD profile is used with authselect:

> authselect current
Profile ID: sssd
Enabled features:
- with-fingerprint
- with-silent-lastlog

The sssd packages aren't installed

Environment

• CloudLinux

Solution

Install the following package:

sssd-client-2.9.4-4.el8_10.x86_64

If AD/LDAP (for which sssd is typically required) is not used, remove the pam_sss from the pam config

Cause

Malfunctioning PAM libraries.