Thanks again Jakub.

Then I think the issue, as you mentioned, in my slapd.conf file I have:

"disallow bind_anon"

Or would simply commenting that out solve it?

I'll look into adding sssd to authenticate with the 3 you mentioned and get back.


Thanks!!!

------ Original Message ------
From: "Jakub Hrozek" <[email protected]>
To: [email protected]
Sent: 8/4/2014 9:37:48 AM
Subject: Re: [SSSD] Trying to ssh with sssd/pam configuration

On Mon, Aug 04, 2014 at 01:10:36PM +0000, Sterling Sahaydak wrote:
 Thanks Jakub. That's what I thought, but I checked the ldapsearch and
 retreiving seems to work:

[root@test-machine ~]# ldapsearch -H ldaps://ldap01.something.net -x -W -D
 'cn=Manager,dc=something,dc=net' -b dc=something,dc=net

yes, but here you bind as cn=Manager,dc=something,dc=net, sssd by
default binds anonymously.

So I suspect an ACI issue. You can either
    - change the ACIs on the server
    - or make SSSD authenticate using ldap_default_bind_dn and
      ldap_default_authtok_type + ldap_default_authtok
_______________________________________________
sssd-devel mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

_______________________________________________
sssd-devel mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to