[SSSD-users] Re: sssd failing due to self-signed certificates--but that's not what openssl says

2024-02-26 Thread Gordon Messmer
On 2024-02-21 09:45, Johnnie W Adams wrote:      So I've got a very puzzling situation. Just today, when I look at sssd with systemctl status, I get this error:*Could not start TLS encryption. error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (self signed

[SSSD-users] Re: sssd failing due to self-signed certificates--but that's not what openssl says

2024-02-26 Thread Alexey Tikhonov
Hi, did you try to set `ldap_library_debug_level = -1` (see 'man sssd-ldap') and inspect /var/log/sssd/sssd_$domain.log? It might give additional details. On Wed, Feb 21, 2024 at 8:54 PM Johnnie W Adams wrote: > We are connecting to an LDAP server. Thanks! > > On Wed, Feb 21, 2024 at 1:53 PM

[SSSD-users] Re: sssd failing due to self-signed certificates--but that's not what openssl says

2024-02-21 Thread Johnnie W Adams
We are connecting to an LDAP server. Thanks! On Wed, Feb 21, 2024 at 1:53 PM Spike White wrote: > Are you connecting an AD server or an LDAP server? If the former is > ad_use_ldaps set to true or false? > > Spike > > On Wed, Feb 21, 2024 at 11:46 AM Johnnie W Adams wrote: > >> Hi, folks, >>

[SSSD-users] Re: sssd failing due to self-signed certificates--but that's not what openssl says

2024-02-21 Thread Spike White
Are you connecting an AD server or an LDAP server? If the former is ad_use_ldaps set to true or false? Spike On Wed, Feb 21, 2024 at 11:46 AM Johnnie W Adams wrote: > Hi, folks, > > > So I've got a very puzzling situation. Just today, when I look at > sssd with systemctl status, I get

[SSSD-users] Re: sssd failing due to self-signed certificates--but that's not what openssl says

2024-02-21 Thread Diego Zuccato
Just shooting in the dark: maybe you included the (self signed) root cert in the chain when it's also in the system cert store? Diego Il mer 21 feb 2024, 18:46 Johnnie W Adams ha scritto: > Hi, folks, > > > So I've got a very puzzling situation. Just today, when I look at > sssd with