[SSSD] fun with sssd, fc13, ldaps, start_tls?

Bobby Krupczak rdk at krupczak.org
Wed May 26 14:32:23 UTC 2010


Hi!

I'm installing a new fc13 machine and want it to authenticate to my
existing (working) ldap server.

I went through authconfig and set up ldaps for authentication.

ldapsearch works fine (but uses /etc/ldap.conf and
/etc/openldap/ldap.conf)

I cant get my sssd to authenticate properly.  After getting the
debugging to work, I see this in debug ouput:

[sssd[be[default]]] [fo_resolve_service_send] (4): Trying to resolve service 'LDAP'
[sssd[be[default]]] [resolv_gethostbyname_send] (4): Trying to resolve
A record of 'columbia.krupczak.org'
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'resolving name'
[sssd[be[default]]] [set_server_common_status] (4): Marking server
'columbia.krupczak.org' as 'name resolved'
[sssd[be[default]]] [be_resolve_server_done] (4): Found address for server
columbia.krupczak.org: [192.24.251.115]
[sssd[be[default]]] [sdap_get_rootdse_done] (2): No RootDSE for server ?!
[sssd[be[default]]] [fo_set_port_status] (4): Marking port 636 of
server 'columbia.krupczak.org' as 'not working'
[sssd[be[default]]] [acctinfo_callback] (4): Request
processed. Returned 3,2,Enum Users Failed 
[sssd[nss]] [sss_dp_get_reply] (4): Got reply (3, 2, Enum Users
Failed) from Data Provider 
[sssd[nss]] [nss_cmd_getpwnam_dp_callback] (2): Unable to get
information from Data Provider Error: 3, 2, Enum Users Failed

So, it looks like ldap connection is made and then tossed.  My ldap
server is using ssl but not start_tls.  

Any suggestions as to config settings to try/change?

I do have ldaps set for the URI.  All the settings are virtually
default and vanilla fc13 install.

I commented out "ldap_is_use_start_tls" so my understanding is that is
default False.

Thanks,

Bobby



More information about the sssd-devel mailing list