Hi Athos,
I have created two Ubuntu test servers (Ubu 18.04.6 and 20.04.3) and managed to 
reproduce the original issue I reported for this bug.
Am not sure access logs will provide anything due sssd fails to start due to 
the aforementioned startup errors "Could not start TLS encryption. (unknown 
error code)".
When trying an ldapsearch with TLS I get:
# ldapsearch -x -Z -v -H ldaps://ad-server-01:636 -b "dc=company,dc=com" 
"(sAMAccountName=myUserName)" cn
ldap_initialize( ldaps://ad-server-01:636/??base )
ldap_start_tls: Operations error (1)
        additional info: 00000000: LdapErr: DSID-0C09127F, comment: TLS or SSL 
already in effect, data 0, v3839
filter: (sAMAccountName=myUserName)
requesting: cn
# extended LDIF
#
# LDAPv3
# base <dc=helsemn,dc=no> with scope subtree
# filter: (sAMAccountName=myUserName)
# requesting: cn
#

# search result
search: 3
result: 1 Operations error
text: 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this opera
 tion a successful bind must be completed on the connection., data 0, v3839

# numResponses: 1

The status of this bug has been changed from Incomplete and is now "in
progress", where there is another user (Snakekick) that is also
experiencing this issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1921494

Title:
  ldap_install_tls occasionally fails due to watchdog timeout when using
  ad_use_ldaps with tls

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1921494/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to