[SSSD] Trying to ssh with sssd/pam configuration

Jakub Hrozek jhrozek at redhat.com
Mon Aug 4 13:37:48 UTC 2014


On Mon, Aug 04, 2014 at 01:10:36PM +0000, Sterling Sahaydak wrote:
> Thanks Jakub.  That's what I thought, but I checked the ldapsearch and
> retreiving seems to work:
> 
> [root at test-machine ~]# ldapsearch -H ldaps://ldap01.something.net -x -W -D
> 'cn=Manager,dc=something,dc=net' -b dc=something,dc=net

yes, but here you bind as cn=Manager,dc=something,dc=net, sssd by
default binds anonymously.

So I suspect an ACI issue. You can either
    - change the ACIs on the server
    - or make SSSD authenticate using ldap_default_bind_dn and
      ldap_default_authtok_type + ldap_default_authtok



More information about the sssd-devel mailing list