On Debian 13 a fresh installed sssd (2.10.1) shows strange permission errors after the start using systemctl restart sssd.service:
systemd[1]: Starting sssd.service - System Security Services Daemon... sssd[3273505]: [sssd] [sss_ini_open] (0x0100): sss_ini_config_file_open() failed [13]: Permission denied sssd[3273505]: [sssd] [sss_ini_read_sssd_conf] (0x0020): sss_ini_open() on '/etc/sssd/sssd.conf' failed [13]: Permission denied sssd[3273505]: Can't read config: 'Failed to open main config file' Permissions are -rw-r----- 1 root root 2261 21. Nov 11:30 /etc/sssd/sssd.conf
and the permissions are also set in the sssd.service file (taken from systemctl edit sssd.service)
ExecStartPre=+-/bin/chown -f -R root:root /etc/sssd ExecStartPre=+-/bin/chmod -f -R g+r /etc/sssd ... User=root Group=root # Note: SSSD package was built without support of running as non-privileged user So the permissions are set before the execution but it does not work. And the comment shows that sssd could not run as user sssd that seems to be the default way since sssd version 2.10.