[SSSD] Trying to ssh with sssd/pam configuration
Sterling Sahaydak
sterling.sahaydak at pi-coral.com
Mon Aug 4 13:10:36 UTC 2014
Thanks Jakub. That's what I thought, but I checked the ldapsearch and
retreiving seems to work:
[root at test-machine ~]# ldapsearch -H ldaps://ldap01.something.net -x -W
-D 'cn=Manager,dc=something,dc=net' -b dc=something,dc=net
"(&(objectclass=posixAccount)(cn=testone))"
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <dc=something,dc=net> with scope subtree
# filter: (&(objectclass=posixAccount)(cn=testone))
# requesting: ALL
#
# testone, Employees, People, something.net
dn: cn=testone,ou=Employees,ou=People,dc=something,dc=net
uidNumber: 1000
loginShell: /bin/sh
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
gidNumber: 1500
userPassword:: *********
givenName: test
homeDirectory: /home/users/testone
sn: one
uid: testone
cn: testone
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
------ Original Message ------
From: "Jakub Hrozek" <jhrozek at redhat.com>
To: sssd-devel at lists.fedorahosted.org
Sent: 8/4/2014 8:03:15 AM
Subject: Re: [SSSD] Trying to ssh with sssd/pam configuration
>On Thu, Jul 31, 2014 at 07:26:14PM +0000, Sterling Sahaydak wrote:
>
>There is a different problem now:
>
>> (Thu Jul 31 15:09:40 2014) [sssd[be[LDAP]]] [be_get_account_info]
>>(0x0100):
>> Got request for [4097][1][name=testone]
>> (Thu Jul 31 15:09:40 2014) [sssd[be[LDAP]]]
>>[sdap_search_user_next_base]
>> (0x0400): Searching for users with base [dc=something,dc=net]
>> (Thu Jul 31 15:09:40 2014) [sssd[be[LDAP]]]
>>[sdap_get_generic_ext_step]
>> (0x0400): calling ldap_search_ext with
>> [(&(uid=testone)(objectclass=posixAccount))][dc=something,dc=net].
>
>This query didn't find anything. It's not easy for me to tell what's
>wrong since the output is obfuscated. Can you first make sure with
>ldapsearch that the configured search bases are what you'd expect and
>there are no ACI issues?
>_______________________________________________
>sssd-devel mailing list
>sssd-devel at lists.fedorahosted.org
>https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list