[SSSD-users] sssd auth issue on centos 5.10

Daniel Jung mimianddaniel at gmail.com
Tue Aug 19 23:37:42 UTC 2014


Still seeing sssd[be[LDAP]]: Could not start TLS encryption. unknown error

Wed Aug 20 01:27:53:174091 2014) [sssd[be[LDAP]]] [sdap_sys_connect_done]
(0x0100): Executing START TLS
(Wed Aug 20 01:27:53:174891 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): START TLS result: Success(0), (null)
(Wed Aug 20 01:27:53:174930 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): ldap_install_tls failed: [Connect error] [unknown error]

As a recap, openldap user land tools works using -ZZ. upgraded sssd to
1.9.6, upgraded openldap lib to 2.4.39. Any other ideas?

By the way, what was the main decision for compiling against openldap 2.4
when other critical package still compiles against 2.3 ldap lib? Making the
upgrade path to openldap 2.4 very difficult.


On Sat, Aug 16, 2014 at 3:34 AM, Lukas Slebodnik <lslebodn at redhat.com>
wrote:

> On (15/08/14 16:10), Daniel Jung wrote:
> >Was unable to patch those to 1.9.6 (first one was already patched?) Second
> >one was causing error during compile:
> >
> >>
> https://git.fedorahosted.org/cgit/sssd.git/commit/?id=5fe6ca5e339fd345119752e996c14edf8db57660
> You are right this patch is already in 1-9 branch.
>
> >>
> https://git.fedorahosted.org/cgit/sssd.git/commit/?id=7ab7fd0b4e4efd80113aa289115153dabb8fac27
> Version for 1-9 branch is attached.
>
> Could you test it?
> If you don't know then the easist way will be to build rpms with make
>     (make rpms)
>
> LS
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140819/91f24b33/attachment.html>


More information about the sssd-users mailing list