The D-Bus Information Provider
When you install the System Security Services Daemon (SSSD) on an Ubuntu server to manage Active Directory or LDAP authentication, several background services are started. One of these is the sssd-ifp.service. The “IFP” stands for InfoPipe. This specific responder is designed to provide a public D-Bus interface, allowing third-party applications or desktop environments to query SSSD directly for user attributes (like a user’s full name, email address, or custom LDAP fields) without having to parse complex configuration files or make raw LDAP queries themselves.
While this is useful on an enterprise Linux workstation running a full GUI (where the desktop environment might want to display the logged-in Active Directory user’s avatar), it is completely unnecessary on a headless Ubuntu server. Standard server applications (like Apache, Nginx, or SSH) do not query user attributes via D-Bus; they use standard PAM or NSS mechanisms. Leaving the InfoPipe running on a server wastes memory and unnecessarily exposes a D-Bus endpoint.
How to Disable the SSSD InfoPipe Service
You can stop this metadata responder using systemctl.
Warning: Ensure you are on a headless server. Do not disable this on a desktop environment that relies on D-Bus for identity management.
- Open your Ubuntu Terminal or connect via SSH.
- Stop the active service socket (if running):
sudo systemctl stop sssd-ifp.socket- Stop the daemon itself:
sudo systemctl stop sssd-ifp.service- Disable both so they do not attempt to start on the next boot:
sudo systemctl disable sssd-ifp.socket
sudo systemctl disable sssd-ifp.serviceYour SSSD deployment will continue to handle core authentication and authorization via standard channels, but will no longer broadcast user metadata to the system D-Bus.