[SSSD] Trying to ssh with sssd/pam configuration

Sterling Sahaydak sterling.sahaydak at pi-coral.com
Mon Aug 4 13:50:22 UTC 2014


Thanks again Jakub.

Then I think the issue, as you mentioned, in my slapd.conf file I have:

"disallow bind_anon"

Or would simply commenting that out solve it?

I'll look into adding sssd to authenticate with the 3 you mentioned and 
get back.


Thanks!!!

------ Original Message ------
From: "Jakub Hrozek" <jhrozek at redhat.com>
To: sssd-devel at lists.fedorahosted.org
Sent: 8/4/2014 9:37:48 AM
Subject: Re: [SSSD] Trying to ssh with sssd/pam configuration

>On Mon, Aug 04, 2014 at 01:10:36PM +0000, Sterling Sahaydak wrote:
>>  Thanks Jakub. That's what I thought, but I checked the ldapsearch and
>>  retreiving seems to work:
>>
>>  [root at test-machine ~]# ldapsearch -H ldaps://ldap01.something.net -x 
>>-W -D
>>  'cn=Manager,dc=something,dc=net' -b dc=something,dc=net
>
>yes, but here you bind as cn=Manager,dc=something,dc=net, sssd by
>default binds anonymously.
>
>So I suspect an ACI issue. You can either
>     - change the ACIs on the server
>     - or make SSSD authenticate using ldap_default_bind_dn and
>       ldap_default_authtok_type + ldap_default_authtok
>_______________________________________________
>sssd-devel mailing list
>sssd-devel at lists.fedorahosted.org
>https://lists.fedorahosted.org/mailman/listinfo/sssd-devel




More information about the sssd-devel mailing list