[SSSD] Trying to ssh with sssd/pam configuration
Sterling Sahaydak
sterling.sahaydak at pi-coral.com
Mon Aug 4 13:50:22 UTC 2014
Thanks again Jakub.
Then I think the issue, as you mentioned, in my slapd.conf file I have:
"disallow bind_anon"
Or would simply commenting that out solve it?
I'll look into adding sssd to authenticate with the 3 you mentioned and
get back.
Thanks!!!
------ Original Message ------
From: "Jakub Hrozek" <jhrozek at redhat.com>
To: sssd-devel at lists.fedorahosted.org
Sent: 8/4/2014 9:37:48 AM
Subject: Re: [SSSD] Trying to ssh with sssd/pam configuration
>On Mon, Aug 04, 2014 at 01:10:36PM +0000, Sterling Sahaydak wrote:
>> Thanks Jakub. That's what I thought, but I checked the ldapsearch and
>> retreiving seems to work:
>>
>> [root at test-machine ~]# ldapsearch -H ldaps://ldap01.something.net -x
>>-W -D
>> 'cn=Manager,dc=something,dc=net' -b dc=something,dc=net
>
>yes, but here you bind as cn=Manager,dc=something,dc=net, sssd by
>default binds anonymously.
>
>So I suspect an ACI issue. You can either
> - change the ACIs on the server
> - or make SSSD authenticate using ldap_default_bind_dn and
> ldap_default_authtok_type + ldap_default_authtok
>_______________________________________________
>sssd-devel mailing list
>sssd-devel at lists.fedorahosted.org
>https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list