Hi!
[Just subscribed so I'll see replies to the list.]
This is almost certainly your problem. The server is not allowing
access
to the RootDSE (probably by misconfigured ACI). Without the RootDSE, we
can't detect the capabilities of the server and cannot proceed.
The LDAP specification requires that the RootDSE be readable by all. I'm
not sure why the ldapsearch tool works, but it shouldn't.
Also, what version of the SSSD are you running?
I'm sure its my problem -- I've got a lot of them! :)
I used the ORA LDAP book, originally, to set up my ldap server and
clients but I found the book a really difficult read. Thats neither
here nor there though.
I'm using sssd 1.1.1-3 fc13.x86_64
Linux
indianapolis.krupczak.org 2.6.33.4-95.fc13.x86_64 #1 SMP Thu May
13 05:16:23 UTC 2010 x86_64 x86_64 x86_64 GNU/Linux
I went to my slapd.conf file, on my ldap server, and configured what I
think is rootdse read permissions and restarted everything.
access to dn.base="" by * read
No luck though. The dse error message goes away but still cannot
resolve usernames.
# cd ~rdk
-bash: cd: ~rdk: No such file or directory
In the log file, I get this now.
# tail sssd_default.log
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'name resolved'
[sssd[be[default]]] [be_resolve_server_done] (4): Found address for server
columbia.krupczak.org: [192.24.251.115]
[sssd[be[default]]] [simple_bind_send] (4): Executing simple bind as: (null)
[sssd[be[default]]] [simple_bind_done] (5): Server returned no controls.
[sssd[be[default]]] [simple_bind_done] (3): Bind result: Success(0), (null)
[sssd[be[default]]] [fo_set_port_status] (4): Marking port 636 of server
'columbia.krupczak.org' as 'working'
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'working'
[sssd[be[default]]] [sdap_save_user_send] (2): User [rdk] filtered out! (id out of range)
[sssd[be[default]]] [sdap_save_users_process] (2): Failed to store user 0. Ignoring.
[sssd[be[default]]] [acctinfo_callback] (4): Request processed. Returned 0,0,Success
My apologies if these are stupid ldap admin errors on my part . . .
Thanks,
Bobby