This is fantastic Stephen! Completely works, over 636 and everything. Thank you so much for your help on this. I can officially run ~$ service bang-head-against-wall stop.

In the future, how should we look to manage this package? Are these fixes going to be in all future builds of sssd? Do you know when it will be part of a GA release?

Thank you again.

Brandon

On Fri, Feb 11, 2011 at 2:46 PM, Stephen Gallagher <sgallagh@redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/11/2011 02:32 PM, sssd help wrote:
> This is great. Thank you for providing the new rpms.
>
> However, I installed them and it looks like START_TLS isnt quite out of the
> picture.
>
> [root@mgnttest02 sssd]# rpm -qa sssd
> sssd-1.2.1-28.el6.4.2.x86_64
>
> from the sssd_default.log
>
> (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [auth_resolve_done] (8):
> [ldaps://ldap.mydomain.com/] is a secure channel. No need to run START_TLS
> (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [sdap_connect_send] (4):
> Executing START TLS
>
> Looks like sssd is still trying to start tls.
>


Yup, that's what I get for not actually testing the backport. I missed
one (important) line when I ported the patch back to 1.2.x. I'm
rebuilding the scratch build now.

Please try the new build from
http://koji.fedoraproject.org/koji/taskinfo?taskID=2833696


- --
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1VkhsACgkQeiVVYja6o6MScwCfeWcxp8IzPrbjaUqkn4A63/xj
Tg0AoIErbaAXmH5udzYbB6JeWbnIpbMw
=/tlC
-----END PGP SIGNATURE-----
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel