Hi guys,<br>Again I need your help... I&#39;m using     and I configured a domain/my_ldap. During the startup I see these logs:<br><br><span style="font-family:courier new,monospace">[cut]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_step] (0x4000): beginning to connect</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [fo_resolve_service_send] (0x0100): Trying to resolve service &#39;LDAP&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_server_status] (0x1000): Status of server &#39;<a href="http://ldap01.dont.mind.it">ldap01.dont.mind.it</a>&#39; is &#39;name not resolved&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_port_status] (0x1000): Port status of port 389 for server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; is &#39;neu</span><span style="font-family:courier new,monospace">tral&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 5 seconds</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_server_status] (0x1000): Status of server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; is &#39;name not resolved&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [resolv_is_address] (0x4000): [ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it] does not look like an IP address</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [resolv_gethostbyname_step] (0x2000): Querying files</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [resolv_gethostbyname_files_send] (0x0100): Trying to resolve A record of &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.</span><span style="font-family:courier new,monospace">it&#39; in files</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [set_server_common_status] (0x0100): Marking server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; as &#39;resolving name</span><span style="font-family:courier new,monospace">&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [set_server_common_status] (0x0100): Marking server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; as &#39;name resolved&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [be_resolve_server_done] (0x0100): Found address for server ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it: [192.168.14</span><span style="font-family:courier new,monospace">6.128] TTL 7200</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_uri_callback] (0x0400): Constructed uri &#39;ldap://ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it:389&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sss_ldap_init_send] (0x4000): Using file descriptor [24] for LDAP connection.</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_ldap_connect_callback_add] (0x1000): New LDAP connection to [ldap://ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.i</span><span style="font-family:courier new,monospace">t:389/??base] with fd [24].</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_rootdse_send] (0x4000): Getting rootdse</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [(objectclass=*)][].</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [*]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [altServer]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [namingContexts]</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedControl]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedExtension]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedFeatures]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedLDAPVersion]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [supportedSASLMechanisms]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [defaultNamingContext]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [lastUSN]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [highestCommittedUSN]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_step] (0x2000): ldap_search_ext called, msgid = 1</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_process_result] (0x2000): Trace: sh[0x7f6ec4b54440], connected[1], ops[0x7f6ec4b6a610], ldap[0x7f6ec4b579c0]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_ENTRY]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_parse_entry] (0x4000): OriginalDN: [].</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_process_result] (0x2000): Trace: sh[0x7f6ec4b54440], connected[1], ops[0x7f6ec4b6a610], ldap[0x7f6ec4b579c0]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_process_message] (0x4000): Message type: [LDAP_RES_SEARCH_RESULT]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_generic_ext_done] (0x0400): Search result: Success(0), no errmsg set</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_rootdse_done] (0x4000): Got rootdse</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_naming_context] (0x0200): Using value from [namingContexts] as naming context.</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_set_search_base] (0x0100): Setting option [ldap_sudo_search_base] to [dc=dont,dc=<a href="http://mind.it">mind.it</a>].</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_parse_search_base] (0x0100): Search base added: [SUDO][dc=</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it][SUBTREE][]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): No known USN scheme is supported by this server!</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_get_server_opts_from_rootdse] (0x0200): Will use modification timestamp as usn!</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [fo_set_port_status] (0x0100): Marking port 389 of server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; as &#39;not working&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_handle_release] (0x2000): Trace: sh[0x7f6ec4b54440], connected[1], ops[(nil)], ldap[0x7f6ec4b579c0], destructor_lock[0], release_memory[0]</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [remove_connection_callback] (0x4000): Successfully removed connection callback.</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_done] (0x0010): <b>Authentication mechanism not Supported by server</b></span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_done] (0x4000): attempting failover retry on op #1</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_step] (0x4000): beginning to connect</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [fo_resolve_service_send] (0x0100): Trying to resolve service &#39;LDAP&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_server_status] (0x1000): Status of server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; is &#39;name resolved&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [get_port_status] (0x1000): Port status of port 389 for server &#39;ldap01.</span><span style="font-family:courier new,monospace">dont.mind</span><span style="font-family:courier new,monospace">.it&#39; is &#39;not working&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [fo_resolve_service_send] (0x0020): No available servers for service &#39;LDAP&#39;</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_release_conn_data] (0x4000): releasing unused connection</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Input/output error])</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [be_mark_offline] (0x2000): Going offline!</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">(Tue Feb  7 13:44:04 2012) [sssd[be[my_ldap]]] [sdap_id_op_connect_done] (0x4000): notify offline to op #1</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">[cut]</span><br clear="all">

<br>My LDAP server is OpenLDAP. and I have configured the tls part.<br><br><span style="font-family:courier new,monospace">[root@fedora16 ~]# netstat -ntlp |grep slapd</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">tcp        0      0 <a href="http://0.0.0.0:636">0.0.0.0:636</a>                 0.0.0.0:*                   LISTEN      2951/slapd</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">tcp        0      0 <a href="http://0.0.0.0:389">0.0.0.0:389</a>                 0.0.0.0:*                   LISTEN      2951/slapd</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">tcp        0      0 :::636                      :::*                        LISTEN      2951/slapd</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">tcp        0      0 :::389                      :::*                        LISTEN      2951/slapd</span><br style="font-family:courier new,monospace">

<br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">This is the interesting part of my domain/my_ldap section of sssd.conf</span><br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">[domain/my_ldap]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">description = LDAP Users domain</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">min_id = 7000</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">max_id = 8000</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">timeout = 10</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">enumerate = TRUE</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">entry_cache_timeout = 5400</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">cache_credentials = TRUE</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">account_cache_expiration = 0</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">id_provider = ldap</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">use_fully_qualified_names = FALSE</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">auth_provider = ldap</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">access_provider = permit</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">chpass_provider = ldap</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">lookup_family_order = ipv4_first</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">dns_resolver_timeout = 5</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#dns_discovery_domain =</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">#override_gid =</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">case_sensitive = True</span><br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_uri = ldap://<a href="http://ldap01.dont.mind.it:389">ldap01.dont.mind.it:389</a></span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_chpass_uri = ldap://<a href="http://ldap01.dont.mind.it:389">ldap01.dont.mind.it:389</a></span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_search_base = dc=dont,dc=<a href="http://mind.it?sub?(objectClass=inetOrgPerson)">mind.it?sub?(objectClass=inetOrgPerson)</a></span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_schema = rfc2307bis</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_default_bind_dn = cn=mydn,dc=dont,dc=<a href="http://mind.it">mind.it</a></span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_default_authtok_type = pippo</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">#ldap_default_authtok</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_object_class = posixAccount</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_user_name = uid</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_uid_number = uidNumber</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_user_gid_number = gidNumber</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_gecos = gecos</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_user_home_directory = homeDirectory</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_shell = loginShell</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_user_uuid = entryUUID</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_modify_timestamp = modifyTimestamp</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_user_shadow_last_change = shadowLastChange</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_user_shadow_min = shadowMin</span><br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">#### INIZIO - SSL/TLS ####</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace"># Imposto la richiesta e la validazione del certificato</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">ldap_tls_reqcert = demand</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">#</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#ldap_tls_cacert =</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_tls_cacertdir = /etc/pki/tls/certs</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#ldap_tls_cert =</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">#ldap_tls_key =</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#ldap_tls_cipher_suite =</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">ldap_id_use_start_tls = false</span><br style="font-family:courier new,monospace">

<span style="font-family:courier new,monospace">#### FINE - SSL/TLS ####</span><br style="font-family:courier new,monospace"><br>Could you help me in understanding what is the cause of the backend discard?<br><br>Thanks a lot as usual<br>

Marco<br><br><br><br>