Still seeing sssd[be[LDAP]]: Could not start TLS encryption. unknown error

Wed Aug 20 01:27:53:174091 2014) [sssd[be[LDAP]]] [sdap_sys_connect_done] (0x0100): Executing START TLS
(Wed Aug 20 01:27:53:174891 2014) [sssd[be[LDAP]]] [sdap_connect_done] (0x0080): START TLS result: Success(0), (null)
(Wed Aug 20 01:27:53:174930 2014) [sssd[be[LDAP]]] [sdap_connect_done] (0x0080): ldap_install_tls failed: [Connect error] [unknown error]

As a recap, openldap user land tools works using -ZZ. upgraded sssd to 1.9.6, upgraded openldap lib to 2.4.39. Any other ideas? 

By the way, what was the main decision for compiling against openldap 2.4 when other critical package still compiles against 2.3 ldap lib? Making the upgrade path to openldap 2.4 very difficult. 


On Sat, Aug 16, 2014 at 3:34 AM, Lukas Slebodnik <lslebodn@redhat.com> wrote:
On (15/08/14 16:10), Daniel Jung wrote:
>Was unable to patch those to 1.9.6 (first one was already patched?) Second
>one was causing error during compile:
>
>> https://git.fedorahosted.org/cgit/sssd.git/commit/?id=5fe6ca5e339fd345119752e996c14edf8db57660
You are right this patch is already in 1-9 branch.

>> https://git.fedorahosted.org/cgit/sssd.git/commit/?id=7ab7fd0b4e4efd80113aa289115153dabb8fac27
Version for 1-9 branch is attached.

Could you test it?
If you don't know then the easist way will be to build rpms with make
    (make rpms)

LS

_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users