[SSSD] new ldap users inconsistently able to auth on existing servers

Stephen Gallagher sgallagh at redhat.com
Wed Jun 22 12:50:31 UTC 2011


On Tue, 2011-06-21 at 17:00 -0400, Johnny Tan wrote:
> On Tue, Jun 21, 2011 at 8:27 AM, Stephen Gallagher <sgallagh at redhat.com> wrote:
> > You can try our latest git releases by installing this yum repository
> > file:
> > http://jdennis.fedorapeople.org/ipa-devel/ipa-devel-rhel.repo
> >
> > However, be aware that this currently contains the pre-release bits that
> > will become SSSD 1.6.0 (It should generally be stable, but I'd not put
> > it into production. Insert usual disclaimers about untested code,
> > possible loss of data, life or sanity, etc.)
> 
> Right, I'd rather not run this.
> 
> > Otherwise, I think you'll have to wait until the final RHEL 5.7 release
> > is available so you can download the official RPMs. I don't think the
> > 5.7 beta RPMs are available outside of the beta DVD images at this time.
> > (I suppose you could download the ISO images and extract the RPMs from
> > them too).
> 
> What's the exact version I should be looking for? Whether it's shipped
> with the 5.7-BETA or even a later one that is recommended. I'm
> thinking if I dig around and find the most recent possible srpm and
> then drop the latest maintenance tarball in there, I could do an rpm
> rebuild of it.


The version that shipped in RHEL 5.7 beta was sssd-1.5.1-34.el5. You
would also need openldap24-libs-2.4.23-5.el5 and ding-libs-0.1.2-10.el5

Unfortunately, because of the addition of openldap24, it's non-trivial
to rebuild from Fedora (since the build scripts had to be modified to
look for this updated version of the openldap client libraries). The
rebuild will work, and SSSD will function, but it will be missing some
features particular to openldap 2.4 (such as support for following
referrals). Of course, those features didn't exist in RHEL 5.6 either,
so you're clearly not missing them.

If you want to rebuild from Fedora, do so from Fedora 14. There were
build changes made to F15 to support a newer version of libldb and that
won't rebuild on RHEL 5. Be aware though, Fedora 14 has SSSD 1.5.8. If
you want to get back onto a supported version when it's released, it
will require manual work with RPM to do so, because the supported
versions are 1.5.1+patches (which makes them effectively identical to
1.5.8, but that's another story).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110622/b1bee63b/attachment.sig>


More information about the sssd-devel mailing list