SSSD / sssd

#2620 id_provider=proxy with auth_provider=ldap does not work reliably
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

In case sssd is set with id_provider=proxy and auth_provider=ldap and at the same time ldaps:// (not TLS) is used, then our connection mechanism does not work well. The caller then must set sdap_sh_connected which we don't do. Everything works well with TLS.

This is an example of why we must refactor the LDAP connection logic completely, the caller should not be responsible for setting a flag himself.

Fields changed

owner: somebody => jhrozek
patch: 0 => 1
status: new => assigned

Fields changed

summary: id_provider=files with auth_provider=ldap does not work reliably => id_provider=proxy with auth_provider=ldap does not work reliably

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1209483 (Red Hat Enterprise Linux 7)

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1209483 1209483]
  • master: 450c2b78ff0bd5044c4c73f32ca8459b211dd446

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.13 alpha
resolution: => fixed
status: assigned => closed

Metadata Update from @jhrozek:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.13 alpha

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3661

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
1.12.4
None
0
1
https://bugzilla.redhat.com/show_bug.cgi?id=1209483
0
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.