Hi!
I'm installing a new fc13 machine and want it to authenticate to my
existing (working) ldap server.
I went through authconfig and set up ldaps for authentication.
ldapsearch works fine (but uses /etc/ldap.conf and
/etc/openldap/ldap.conf)
I cant get my sssd to authenticate properly. After getting the
debugging to work, I see this in debug ouput:
[sssd[be[default]]] [fo_resolve_service_send] (4): Trying to resolve service
'LDAP'
[sssd[be[default]]] [resolv_gethostbyname_send] (4): Trying to resolve
A record of 'columbia.krupczak.org'
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'resolving name'
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'name resolved'
[sssd[be[default]]] [be_resolve_server_done] (4): Found address for server
columbia.krupczak.org: [192.24.251.115]
[sssd[be[default]]] [sdap_get_rootdse_done] (2): No RootDSE for server ?!
[sssd[be[default]]] [fo_set_port_status] (4): Marking port 636 of
server 'columbia.krupczak.org' as 'not working'
[sssd[be[default]]] [acctinfo_callback] (4): Request
processed. Returned 3,2,Enum Users Failed
[sssd[nss]] [sss_dp_get_reply] (4): Got reply (3, 2, Enum Users
Failed) from Data Provider
[sssd[nss]] [nss_cmd_getpwnam_dp_callback] (2): Unable to get
information from Data Provider Error: 3, 2, Enum Users Failed
So, it looks like ldap connection is made and then tossed. My ldap
server is using ssl but not start_tls.
Any suggestions as to config settings to try/change?
I do have ldaps set for the URI. All the settings are virtually
default and vanilla fc13 install.
I commented out "ldap_is_use_start_tls" so my understanding is that is
default False.
Thanks,
Bobby