[SSSD] LDAPS Connection error

John Hodrien J.H.Hodrien at leeds.ac.uk
Tue Nov 22 15:16:52 UTC 2011


On Tue, 22 Nov 2011, sssd help wrote:

> Thanks for the response Jakub,
>
> I meant to update this last night. In my testing I installed
> openldap-clients and attempted to do manual ldap searches. LDAPS lookups
> were failing but LDAP lookups were fine. I noticed that our RHEL6 machines
> were running a different version of openldap than our 6.1 machines. RHEL6
> was running openldap-2.4.19 and RHEL6.1 was running openldap-2.4.34. That
> turned out to be the issue. I rolled back the version of openldap and SSSD
> 1.5.1-34 started working brilliantly.
>
> I dont know if this is a known issue or not. It doesnt seem like a problem
> with SSSD, seems more like a problem with openldap, and there's a slight
> chance it is a custom package because this is actually Oracle Enterprise
> Linux 6.1 (aka rebranded RHEL6.1).
>
> Sorry to make added noise in the mailing list but at least this will be on
> the tubes if anyone else runs into this issue.

Personally I wouldn't choose to run 2.4.19.  Problems I was having with sssd
turned out to be OpenLDAP bugs that were fixed by 2.4.23 (I /thought/ that was
the release that fixed it anyway, that's what I'm running).

jh



More information about the sssd-devel mailing list