47.2. Enabling and configuring session recording with SSSD from the CLI

Procedure

1. Install the tlog package:

   # dnf install tlog

2. Open the sssd-session-recording.conf configuration file:

   # vi /etc/sssd/conf.d/sssd-session-recording.conf

3. Specify the scope of session recording and the users and groups to record. For example:

   [session_recording]
   scope = some
   users = <user_name_1>, <user_name_2>
   groups = <group_name>
   exclude_users = <user_name_to_exclude>
   exclude_groups = <group_name_to_exclude>

   For more details, see the sssd-session-recording(5) man page on your system.

4. To enable the SSSD profile, run the following command:

   # authselect select sssd with-tlog

5. Restart SSSD to load the configuration changes:

   # systemctl restart sssd