[SSSD] Problems configuring sssd for ssl/ldaps no tls

sssd help sssdhelp at gmail.com
Fri Feb 11 20:04:16 UTC 2011


This is fantastic Stephen! Completely works, over 636 and everything. Thank
you so much for your help on this. I can officially run ~$ service
bang-head-against-wall stop.

In the future, how should we look to manage this package? Are these fixes
going to be in all future builds of sssd? Do you know when it will be part
of a GA release?

Thank you again.

Brandon

On Fri, Feb 11, 2011 at 2:46 PM, Stephen Gallagher <sgallagh at redhat.com>wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 02/11/2011 02:32 PM, sssd help wrote:
> > This is great. Thank you for providing the new rpms.
> >
> > However, I installed them and it looks like START_TLS isnt quite out of
> the
> > picture.
> >
> > [root at mgnttest02 sssd]# rpm -qa sssd
> > sssd-1.2.1-28.el6.4.2.x86_64
> >
> > from the sssd_default.log
> >
> > (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [auth_resolve_done] (8):
> > [ldaps://ldap.mydomain.com/] is a secure channel. No need to run
> START_TLS
> > (Fri Feb 11 14:27:08 2011) [sssd[be[default]]] [sdap_connect_send] (4):
> > Executing START TLS
> >
> > Looks like sssd is still trying to start tls.
> >
>
>
> Yup, that's what I get for not actually testing the backport. I missed
> one (important) line when I ported the patch back to 1.2.x. I'm
> rebuilding the scratch build now.
>
> Please try the new build from
> http://koji.fedoraproject.org/koji/taskinfo?taskID=2833696
>
>
> - --
> Stephen Gallagher
> RHCE 804006346421761
>
> Delivering value year after year.
> Red Hat ranks #1 in value among software vendors.
> http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk1VkhsACgkQeiVVYja6o6MScwCfeWcxp8IzPrbjaUqkn4A63/xj
> Tg0AoIErbaAXmH5udzYbB6JeWbnIpbMw
> =/tlC
> -----END PGP SIGNATURE-----
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110211/e40b31d9/attachment.html>


More information about the sssd-devel mailing list