[SSSD] Problems configuring sssd for ssl/ldaps no tls

Stephen Gallagher sgallagh at redhat.com
Fri Feb 11 18:52:54 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/11/2011 12:23 PM, sssd help wrote:
> Thank you for the taking a look Sumit.
> 
> I am testing with ldapsearch now. My first searches are returning:
> ldap_start_tls: Connect error (-11)
> 
> which i guess is what we would expect since we cant do tls against our load
> balancers. I will continue testing and let you know if I come up with
> something different.
> 

Ok, this is actually probably a bug in the SSSD then. We shouldn't be
attempting to perform a START_TLS while using LDAPS.

Sumit opened https://fedorahosted.org/sssd/ticket/795 to track fixing this.

I've submitted a patch for this issue to the list and kicked off a
scratch-build for RHEL 6 RPMs. Please try
http://koji.fedoraproject.org/koji/taskinfo?taskID=2833544 and let me
know if it resolves your issue.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1VhYYACgkQeiVVYja6o6OyngCZATEZjYYhbz2V+AWlPmBT9nbu
68QAn2CMQMx9ZtQj/UcesV33vRf+aQJP
=IhEN
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list