Hi Athos,
I have created two Ubuntu test servers (Ubu 18.04.6 and 20.04.3) and managed to reproduce the original issue I reported for this bug.
Am not sure access logs will provide anything due sssd fails to start due to the aforementioned startup errors "Could not start TLS encryption. (unknown error code)".
When trying an ldapsearch with TLS I get:
# ldapsearch -x -Z -v -H ldaps://ad-server-01:636 -b "dc=company,dc=com" "(sAMAccountName=myUserName)" cn
ldap_initialize( ldaps://ad-server-01:636/??base )
ldap_start_tls: Operations error (1)
additional info: 00000000: LdapErr: DSID-0C09127F, comment: TLS or SSL already in effect, data 0, v3839
filter: (sAMAccountName=myUserName)
requesting: cn
# extended LDIF
#
# LDAPv3
# base <dc=helsemn,dc=no> with scope subtree
# filter: (sAMAccountName=myUserName)
# requesting: cn
#
# search result
search: 3
result: 1 Operations error
text: 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this opera
tion a successful bind must be completed on the connection., data 0, v3839
# numResponses: 1
The status of this bug has been changed from Incomplete and is now "in progress", where there is another user (Snakekick) that is also experiencing this issue.
Hi Athos, /ad-server- 01:636 -b "dc=company,dc=com" "(sAMAccountNam e=myUserName) " cn /ad-server- 01:636/ ??base ) =myUserName) =myUserName)
I have created two Ubuntu test servers (Ubu 18.04.6 and 20.04.3) and managed to reproduce the original issue I reported for this bug.
Am not sure access logs will provide anything due sssd fails to start due to the aforementioned startup errors "Could not start TLS encryption. (unknown error code)".
When trying an ldapsearch with TLS I get:
# ldapsearch -x -Z -v -H ldaps:/
ldap_initialize( ldaps:/
ldap_start_tls: Operations error (1)
additional info: 00000000: LdapErr: DSID-0C09127F, comment: TLS or SSL already in effect, data 0, v3839
filter: (sAMAccountName
requesting: cn
# extended LDIF
#
# LDAPv3
# base <dc=helsemn,dc=no> with scope subtree
# filter: (sAMAccountName
# requesting: cn
#
# search result
search: 3
result: 1 Operations error
text: 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this opera
tion a successful bind must be completed on the connection., data 0, v3839
# numResponses: 1
The status of this bug has been changed from Incomplete and is now "in progress", where there is another user (Snakekick) that is also experiencing this issue.