[SSSD] slow logins via ssh

GOLLSCHEWSKY, Tim Tim.GOLLSCHEWSKY at suncorp.com.au
Fri Sep 23 05:08:15 UTC 2011


>On 09/22/2011 10:16 PM, GOLLSCHEWSKY, Tim wrote:
>> I'm using the latest RHEL6 package.  Should I try compiling v1.6.1 from source?
>>
>If you do not mind trying yes please.
>

I have compiled 1.6.1 OK but I seem to be having trouble with the SASL bind:

  (Fri Sep 23 14:55:47 2011) [[sssd[ldap_child[28025]]]] [ldap_child_get_tgt_sync] (4): Principal name is: [host/hostname.fq.dn at XXX.XXX.XXX]
  (Fri Sep 23 14:55:48 2011) [sssd[be[XXX.XXX.XXX]]] [sasl_bind_send] (4): Executing sasl bind mech: gssapi, user: host/hostname.fq.dn at XXX.XXX.XXX
  (Fri Sep 23 14:55:48 2011) [sssd[be[XXX.XXX.XXX]]] [sasl_bind_send] (1): ldap_sasl_bind failed (-2)[Local error]
  (Fri Sep 23 14:55:48 2011) [sssd[be[XXX.XXX.XXX]]] [child_sig_handler] (4): child [28025] finished successfully.
  (Fri Sep 23 14:55:48 2011) [sssd[be[XXX.XXX.XXX]]] [fo_set_port_status] (4): Marking port 389 of server 'ldapserver.fq.dn' as 'not working'

In /var/log/messages I get:

   Sep 23 15:00:40 hostname sssd_be: GSSAPI Error: An invalid name was supplied (Unknown error)

I'm using the same principle name though that I was before:

  host/hostname.fq.dn at XXX.XXX.XXX

Any idea what I'm doing wrong?

Best regards,

Tim Gollschewsky.


This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.



More information about the sssd-devel mailing list