Thanks again Jakub.
Then I think the issue, as you mentioned, in my slapd.conf file I have:
"disallow bind_anon"
Or would simply commenting that out solve it?
I'll look into adding sssd to authenticate with the 3 you mentioned and
get back.
Thanks!!!
------ Original Message ------
From: "Jakub Hrozek" <jhrozek(a)redhat.com>
To: sssd-devel(a)lists.fedorahosted.org
Sent: 8/4/2014 9:37:48 AM
Subject: Re: [SSSD] Trying to ssh with sssd/pam configuration
On Mon, Aug 04, 2014 at 01:10:36PM +0000, Sterling Sahaydak wrote:
> Thanks Jakub. That's what I thought, but I checked the ldapsearch and
> retreiving seems to work:
>
> [root@test-machine ~]# ldapsearch -H
ldaps://ldap01.something.net -x
>-W -D
> 'cn=Manager,dc=something,dc=net' -b dc=something,dc=net
yes, but here you bind as cn=Manager,dc=something,dc=net, sssd by
default binds anonymously.
So I suspect an ACI issue. You can either
- change the ACIs on the server
- or make SSSD authenticate using ldap_default_bind_dn and
ldap_default_authtok_type + ldap_default_authtok
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel