What is SSSD?
In Ubuntu, SSSD stands for System Security Services Daemon. It is a powerful enterprise tool designed to allow your Ubuntu machine to authenticate against remote directory services. For example, if you are integrating an Ubuntu desktop into a corporate environment managed by Microsoft Active Directory (AD) or an LDAP server, SSSD is the service that takes your login credentials and checks them against the corporate server.
However, if you are running Ubuntu on a standalone home PC, a personal laptop, or a cloud server that relies exclusively on local user accounts (managed in /etc/passwd) and SSH keys, SSSD is entirely useless. It sits in the background consuming memory, unnecessarily checking its configuration files on boot. You can safely disable it on standalone machines.
How to Disable SSSD in Ubuntu
You can turn off the authentication daemon using standard systemctl commands.
- Open your Ubuntu Terminal (or connect via SSH).
- First, stop the service if it is currently running:
sudo systemctl stop sssd.service- Next, disable the service so it does not attempt to start the next time the system boots:
sudo systemctl disable sssd.service- Because enterprise authentication is often tied to multiple sub-services, it is highly recommended to mask SSSD to ensure no PAM (Pluggable Authentication Modules) update accidentally resurrects it:
sudo systemctl mask sssd.serviceYour local accounts will continue to function exactly as before, authenticating instantly against your local shadow files, but your system will no longer waste boot time or RAM on unused enterprise directory daemons.