[Pkg-sssd-devel] Bug#841013: sssd-ldap: After update to 1.14.1: ldap_result error: [Can't contact LDAP server]

[Jacek Szafarkiewicz]

Package: sssd-ldap
Version: 1.13.4-3
Severity: important

Dear Maintainer,
After update to sssd to 1.14.1 it don't want to connect to ldap

I get errors:
on Client:
[sssd[be[Chmura]]] [be_resolve_server_process] (0x0200): Found address for
server ldap.example.com: [10.0.0.1] TTL 0
[sssd[be[Chmura]]] [sssd_async_socket_init_send] (0x4000): Using file
descriptor [22] for the connection.
[sssd[be[Chmura]]] [sssd_async_socket_init_send] (0x0400): Setting 6 seconds
timeout for connecting
[sssd[be[Chmura]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP
connection to [ldaps://ldap.example.com:636/??base] with fd [22].
[sssd[be[Chmura]]] [sdap_get_rootdse_send] (0x4000): Getting rootdse
[sssd[be[Chmura]]] [sdap_print_server] (0x2000): Searching 10.10.0.4:636
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with [(objectclass=*)][].
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[altServer]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[namingContexts]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedControl]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedExtension]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedFeatures]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedLDAPVersion]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[supportedSASLMechanisms]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[domainControllerFunctionality]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[defaultNamingContext]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[lastUSN]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs:
[highestCommittedUSN]
[sssd[be[Chmura]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext
called, msgid = 1
[sssd[be[Chmura]]] [sdap_op_add] (0x2000): New operation 1 timeout 6
[sssd[be[Chmura]]] [sdap_process_result] (0x2000): Trace: sh[0xaf5dc0],
connected[1], ops[0xf495b0], ldap[0xae7560]
[sssd[be[Chmura]]] [sdap_process_result] (0x0040): ldap_result error: [Can't
contact LDAP server]

on Server:
TLS: can't accept: An unexpected TLS packet was received..

When I try ldapsearch it works.
When I downgrade to 1.13.4 sssd works well.

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (980, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sssd-ldap depends on:
ii  libc6             2.24-3
ii  libldap-2.4-2     2.4.42+dfsg-2+b3
ii  libsss-idmap0     1.14.1-1
ii  sssd-common       1.14.1-1
ii  sssd-krb5-common  1.14.1-1

Versions of packages sssd-ldap recommends:
ii  ldap-utils  2.4.42+dfsg-2+b3

Versions of packages sssd-ldap suggests:
pn  libsasl2-modules-ldap  <none>