If we are trying to do SASL bindings and have invalid credentials, the LDAP bind will fail. We should handle this better and maybe even flush the bad credentials.
Sep 1 09:11:39 foo named[12627]: registering dynamic ldap driver for ipa. Sep 1 09:11:39 foo named[12627]: trying to establish LDAP connection to ldap://foo.example.com Sep 1 09:11:39 foo named[12627]: Using default keytab file name: FILE:/etc/named.keytab Sep 1 09:11:39 foo named[12627]: Principal not found in cred cache (Matching credential not found) Sep 1 09:11:39 foo named[12627]: trying interactive bind using GSSAPI mechanism Sep 1 09:11:39 foo named[12627]: doing interactive bind Sep 1 09:11:39 foo named[12627]: got request for SASL_CB_USER Sep 1 09:11:39 foo named[12627]: bind to LDAP server failed: Invalid credentials
This issue is no longer reproducible with the
http://git.fedorahosted.org/git/?p=bind-dyndb-ldap.git;a=commit;h=04fdf25f8c74e5e6430802c3cf8e5c8d788c2832
Closing.
Metadata Update from @atkac: - Issue assigned to mnagy - Issue set to the milestone: 0.1.1ipa
Log in to comment on this ticket.