SSSD authenticating with LDAP using an obfuscated password fails at [sdap_cli_auth_step], causing sssd_be to go offline
Issue
- SSSD configured with option
ldap_default_authtok_type = obfuscated_passwordfails to connect to LDAP and causessssd_beto go offline. -
With SSSD debug mode
0x7ff0logging enabled, the logs indicate that the connection fails at the[sdap_cli_auth_step]and displays anInvalid authtoken typewarning.(2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x0100): expire timeout is 900 (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1637337171 --> (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x1000): Invalid authtoken type (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [22]: Invalid argument (2021-11-19 15:37:51): [be[testdomain.example.org]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ldapserver.testdomain.example.org' as 'not working' (2021-11-19 15:37:51): [be[testdomain.example.org]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'ldapserver.testdomain.example.org' as 'not working' (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_handle_release] (0x2000): Trace: sh[0x55bc6f9f5f80], connected[1], ops[(nil)], ldap[0x55bc6fa0b230], destructor_lock[0], release_memory[0] (2021-11-19 15:37:51): [be[testdomain.example.org]] [remove_connection_callback] (0x4000): Successfully removed connection callback. (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_id_op_connect_done] (0x0400): Marking the backend "testdomain.example.org" offline [22]: Invalid argument (2021-11-19 15:37:51): [be[testdomain.example.org]] [be_mark_offline] (0x2000): Going offline! -
SSSD configured with option
ldap_default_authtok_type = passwordconnects to LDAP successfully.
Environment
- Red Hat Enterprise Linux (RHEL)
- 8.4
- sssd-2.4.0-9.el8_4.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.