How to set up SSSD with LDAP

[ahasenack]

Note:
This documentation has moved to a new home! Please update your bookmarks to the new URL for the up-to-date version of this page.

[nuccitheboss]

@ahasenack

• a client host where we will install the necessary tools and login as an user from the LDAP server

Hi there! This might just be a me thing, but I believe this bullet would read/speak aloud better if “login as an user” were changed to “login as a user.” I think that “an” before the vowel is the grammatical rule, but my internal monologue reads it better as “as a user” . Let me know what you think.

[ahasenack]

Agreed, changed. Thanks.

[isalillo]

Hi.
This command “ldapwhoami -x -ZZ -h ldap01.example.com”. I changed ldap01.example.com to my domain, but it give me the error “ldap_start_tls: Can’t contact LDAP server (-1)” .
Also I configurated LDAP with TLS.

Help me please.

[ahasenack]

@isalillo

This command “ldapwhoami -x -ZZ -h ldap01.example.com”. I changed ldap01.example.com to my domain, but it give me the error “ldap_start_tls: Can’t contact LDAP server (-1)” .

Oh, good catch. In recent versions, the ldap command-line utilities dropped the -h parameter in favor of -H <ldapuri>. The above command should read ldapwhoami -x -ZZ -H ldap://ldap01.example.com. I’ll fix it.