[SSSD] Problems configuring sssd for ssl/ldaps no tls

Stephen Gallagher sgallagh at redhat.com
Fri Feb 11 19:46:35 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/11/2011 02:32 PM, sssd help wrote:
> This is great. Thank you for providing the new rpms.
> 
> However, I installed them and it looks like START_TLS isnt quite out of the
> picture.
> 
> [root at mgnttest02 sssd]# rpm -qa sssd
> sssd-1.2.1-28.el6.4.2.x86_64
> 
> from the sssd_default.log
> 
> (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [auth_resolve_done] (8):
> [ldaps://ldap.mydomain.com/] is a secure channel. No need to run START_TLS
> (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [sdap_connect_send] (4):
> Executing START TLS
> 
> Looks like sssd is still trying to start tls.
> 


Yup, that's what I get for not actually testing the backport. I missed
one (important) line when I ported the patch back to 1.2.x. I'm
rebuilding the scratch build now.

Please try the new build from
http://koji.fedoraproject.org/koji/taskinfo?taskID=2833696


- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1VkhsACgkQeiVVYja6o6MScwCfeWcxp8IzPrbjaUqkn4A63/xj
Tg0AoIErbaAXmH5udzYbB6JeWbnIpbMw
=/tlC
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list