SSSD configure with openldap issue

sibyurik · 09-11-2018, 09:30 AM

Hi there, i am trying to install and configure SSSD integrated with OPENLDAP on Ubuntu 18.04 and experiencing the error i don't know how to debug. Here is the issue. For some reason connection to my LDAP servers is being established and dropped all the time by itself that i am seeing under sssd_DOMAIN.log file:

Quote:

(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [be_resolve_server_process] (0x0200): Found address for server ldap02.aws.int.luminoso.com: [10.42.1.62] TTL 80
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_uri_callback] (0x0400): Constructed uri 'ldap://ldap02.aws.int.luminoso.com'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sssd_async_socket_init_send] (0x4000): Using file descriptor [18] for the connection.
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://ldap02.aws.int.luminoso.com:389/??base] with fd [18].
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_sys_connect_done] (0x0100): Executing START TLS
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_op_add] (0x2000): New operation 1 timeout 6
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_process_result] (0x2000): Trace: sh[0x5576b25c7f60], connected[1], ops[0x5576b253a310], ldap[0x5576b254e6b0]
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_EXTENDED]
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_connect_done] (0x0080): START TLS result: Success(0), (null)

And then it fails to connect for some reason:

(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ldap02.aws.int.luminoso.com' as 'not working'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'ldap02.aws.int.luminoso.com' as 'not working'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_handle_release] (0x2000): Trace: sh[0x5576b25c7f60], connected[1], ops[(nil)], ldap[0x5576b254e6b0], destructor_lock[0], release_memory[0]
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [remove_connection_callback] (0x4000): Successfully removed connection callback.
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_id_op_connect_done] (0x4000): attempting failover retry on op #1
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_id_op_connect_step] (0x4000): beginning to connect
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_server_status] (0x1000): Status of server 'ldap01.infra.int.luminoso.com' is 'name resolved'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_port_status] (0x1000): Port status of port 389 for server 'ldap01.infra.int.luminoso.com' is 'not working'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues.
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_server_status] (0x1000): Status of server 'ldap02.aws.int.luminoso.com' is 'name resolved'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_port_status] (0x1000): Port status of port 389 for server 'ldap02.aws.int.luminoso.com' is 'not working'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [get_port_status] (0x0080): SSSD is unable to complete the full connection request, this internal status does not necessarily indicate network port issues.
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [fo_resolve_service_send] (0x0020): No available servers for service 'LDAP'
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_id_release_conn_data] (0x4000): releasing unused connection
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [be_resolve_server_done] (0x1000): Server resolution failed: [5]: Input/output error
(Tue Sep 11 10:19:33 2018) [sssd[be[LUMINOSO]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Input/output error])

Unfortunately i am not able to get any information from my LDAP server about users.

Any help will be greatly appreciated

sibyurik · 09-17-2018, 10:18 AM

Please ignore this i figured it out.