SSSD authenticating with LDAP using an obfuscated password fails at [sdap_cli_auth_step], causing sssd_be to go offline

Solution Verified - Updated -

Issue

  • SSSD configured with option ldap_default_authtok_type = obfuscated_password fails to connect to LDAP and causes sssd_be to go offline.
  • With SSSD debug mode 0x7ff0 logging enabled, the logs indicate that the connection fails at the [sdap_cli_auth_step] and displays an Invalid authtoken type warning.

    (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x0100): expire timeout is 900
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x1000): the connection will expire at 1637337171
    --> (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_auth_step] (0x1000): Invalid authtoken type
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_cli_connect_recv] (0x0040): Unable to establish connection [22]: Invalid argument
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [fo_set_port_status] (0x0100): Marking port 389 of server 'ldapserver.testdomain.example.org' as 'not working'
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'ldapserver.testdomain.example.org' as 'not working'
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_handle_release] (0x2000): Trace: sh[0x55bc6f9f5f80], connected[1], ops[(nil)], ldap[0x55bc6fa0b230], destructor_lock[0], release_memory[0]
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [remove_connection_callback] (0x4000): Successfully removed connection callback.
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [sdap_id_op_connect_done] (0x0400): Marking the backend "testdomain.example.org" offline [22]: Invalid argument
    (2021-11-19 15:37:51): [be[testdomain.example.org]] [be_mark_offline] (0x2000): Going offline!
    
  • SSSD configured with option ldap_default_authtok_type = password connects to LDAP successfully.

Environment

  • Red Hat Enterprise Linux (RHEL)
    • 8.4
  • sssd-2.4.0-9.el8_4.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content