SSSD / sssd

#3770 freeipa, sssd and anonymous bind
Closed: worksforme Opened by gerases.

Closed: worksforme
Reopen Issue

I was going to disable anonymous binding in freeipa today (by setting nsslapd-allow-anonymous-access to rootdse), but I'm not sure how it will affect the sssd / free ipa integration.

Should I define a specific bind dn?

I don't think so, the only anonymous bind that SSSD uses is to retrieve the rootDSE and there SSSD should just retry after bind.

So if you don't mind, I'm going to close this ticket as worksforme, please reopen it if there is an actual issue.

Metadata Update from @jhrozek:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4776

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
High
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.