SSSD / sssd

#299 LDAP Provider using GSSAPI auth loses connection after 5 minutes
Closed: Fixed Opened by sgallagh.

Closed: Fixed
Reopen Issue

When configured to use GSSAPI Kerberos encryption, the LDAP provider requests a ticket for 300 seconds. When this time is up, the next time the LDAP provider attempts to make a request to the remote server, it is refused, receiving the error "Cannot contact LDAP server". This causes the request to fail and the domain to enter offline mode.

As discussed on IRC, when we receive this error, we should check whether our kerberos ticket is expired. If it is, we should kinit and retry before going offline.

Fixed by d239b492ad0382d7061690219275f175c05e1830

fixedin: => 1.0.0
resolution: => fixed
status: new => closed

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1341

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
LDAP Provider
master
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.