[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation

To: Robert Heller <heller@deepsoft.com>
Subject: Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
From: Quanah Gibson-Mount <quanah@symas.com>
Date: Thu, 28 Sep 2017 13:28:22 -0700
Cc: Openldap Technical <openldap-technical@openldap.org>
Content-disposition: inline
In-reply-to: <WM!8a5b012eff4d73b4fb61ed7c37f2d4f394f7656c7ff73cf2aff9d57d89f7ff62caf9782a501949babf0541aabf43bf7b!@mailstronghold-1.zmailcloud.com>
References: <20170928170817.DE268732A40@sharky3.deepsoft.com> <WM!3841d97ef9fe61874abde790669c89cda7491f751a8d1d42d6fedcad23ad03723369227f2cf988e1296a97f7d1455a45!@mailstronghold-2.zmailcloud.com> <3631C46B10C6A6D96C92A6CA@[192.168.1.30]> <20170928183434.C52377323F2@sharky3.deepsoft.com> <WM!d02d61414b21d1174b6888ab449c4269fa38d934004f76ade936b18cd00ea29eb903d4c22a82e75a76373bb72667b68d!@mailstronghold-3.zmailcloud.com> <5A6DACC51CF6F5156270C77F@[192.168.1.30]> <20170928194148.9B6D973231B@sharky3.deepsoft.com> <WM!998283649fcae77a95b6b69f15c9fdc63edbf085a57860d7ed2bc236107d109afc67b09918790895e2d93d8e26a16af4!@mailstronghold-2.zmailcloud.com> <C2C09B0F4B5C887D285C17BB@[192.168.1.30]> <WM!8a5b012eff4d73b4fb61ed7c37f2d4f394f7656c7ff73cf2aff9d57d89f7ff62caf9782a501949babf0541aabf43bf7b!@mailstronghold-1.zmailcloud.com>

--On Thursday, September 28, 2017 2:18 PM -0700 Quanah Gibson-Mount<quanah@symas.com> wrote:

--On Thursday, September 28, 2017 4:41 PM -0400 Robert Heller
<heller@deepsoft.com> wrote:

Will these spit out useful error messages?  If I just get "TLS
Negotiation  failure" it is not going to be helpful.


However, you may have hit a known and unfixed bug in SSSD:

<https://pagure.io/SSSD/sssd/issue/2896?cversion=0&cnum_hist=6>

You may be better off using a better written piece of software.

--Quanah



--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>

References:
- Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Robert Heller <heller@deepsoft.com>
- Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Quanah Gibson-Mount <quanah@symas.com>
- Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Robert Heller <heller@deepsoft.com>
- Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Quanah Gibson-Mount <quanah@symas.com>
- Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Robert Heller <heller@deepsoft.com>
- Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
  - From: Quanah Gibson-Mount <quanah@symas.com>

Prev by Date: Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
Next by Date: Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation
Index(es):
- Chronological
- Thread