[Pkg-sssd-devel] Bug#770629: Bug#770629: sssd-ldap: ldap_result error: [Can't contact LDAP server] when CNAME

[Timo Aaltonen]

severity 770629 normal
thanks

On 22.11.2014 20:34, Luca Capello wrote:
> Package: sssd-ldap
> Version: 1.11.7-1
> Severity: important
> Usertags: pca.it-authentication
> 
> Hi there,
> 
> sorry for the delay, the subject says all:
> =====
> root at gismo:/etc# tail -f /var/log/sssd/sssd_LDAP.log
> (Sat Nov 22 19:31:14 2014) [sssd[be[LDAP]]] [be_resolve_server_process] (0x0200): Found address for server mantissa.pca.it: [83.211.85.135] TTL 512
> (Sat Nov 22 19:31:15 2014) [sssd[be[LDAP]]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
> ^C
> root at gismo:/etc# grep ldap_uri /etc/sssd/sssd.conf 
> ldap_uri = ldap://mantissa.pca.it
> root at gismo:/etc# host mantissa.pca.it
> mantissa.pca.it is an alias for home.pca.it.
> home.pca.it has address 83.211.85.135
> root at gismo:/etc# 
> =====
> 
> If I put home.pca.it in ldap_uri the be_resolve_server_process line is
> the same but for the hostname, so I am lost.

Do you only have a certificate for home.pca.it?



-- 
t