SSSD vs. PAM for LDAP authorization

[Oko]

FreeNAS has switched form PAM to SSSD for LDAP authorization. Could anybody explain me advantages if any of SSSD over PAM approach. I am primary OpenBSD user. As most of you know OpenBSD uses its own ypldap daemon instead of PAM black magic. On the another hand OpenBSD support for Kerberos authentication is diminishing while FreeNAS just got Kerberos support. Is there any relation between switching to SSSD and Kerberos support?

 

[dlavigne]

SSSD is needed for multiple directory services support, which is the primary reason FreeNAS switched to it (previous FreeNAS versions required you to pick one directory service to use).