Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread John Hodrien
On Fri, 10 May 2013, Joshua Riffle wrote: As pointed out to me in a couple of the other responses TLS and not SSL is probably the better way to go which is surprising to me but admittedly I am new to the LDAP security world and that will give me something to research more deeply. Does SSSD cater

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 11:17:16AM -0400, Simo Sorce wrote: > On Fri, 2013-05-10 at 10:40 +0200, Jakub Hrozek wrote: > > On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > > > On Thu, 9 May 2013, Joshua Riffle wrote: > > > > > > >In the case of service discovery there seems to be no w

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Joshua Riffle
This is all great feedback. Thanks everyone. I'm trying to figure out how to grab a copy of the SEGFAULT core for SSSD which I will provide as an attachment back to this conversation when I figure out how to extract it. I noticed that providers/ldap/ldap_common.c:855 automatically uses SSS_LDAP_SR

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Simo Sorce
On Fri, 2013-05-10 at 10:40 +0200, Jakub Hrozek wrote: > On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > > On Thu, 9 May 2013, Joshua Riffle wrote: > > > > >In the case of service discovery there seems to be no way of getting LDAP > > >to > > >be treated as LDAPS (secure) and I th

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Jakub Hrozek
On Fri, May 10, 2013 at 09:23:33AM +0100, John Hodrien wrote: > On Thu, 9 May 2013, Joshua Riffle wrote: > > >In the case of service discovery there seems to be no way of getting LDAP to > >be treated as LDAPS (secure) and I think this may be leading to a > >segmentation fault in the sss_ldap libr

Re: [SSSD] LDAP Service Discovery Problem

2013-05-10 Thread John Hodrien
On Thu, 9 May 2013, Joshua Riffle wrote: In the case of service discovery there seems to be no way of getting LDAP to be treated as LDAPS (secure) and I think this may be leading to a segmentation fault in the sss_ldap library. _ldap._tcp              SRV  0 0 636 ldap ldaps (which is corr

[SSSD] LDAP Service Discovery Problem

2013-05-10 Thread Joshua Riffle
I was unable to find a way of searching the current SSSD archives in development but I found the following issue in an attempt to combine SASL (Kerberos) and LDAP service discovery. In the case of service discovery there seems to be no way of getting LDAP to be treated as LDAPS (secure) and I thin