ldap_default_authtok_type now defaults to "password" if it is not mentioned in sssd.conf <snip> (Thu May 26 17:09:49 2011) [sssd[be[AD]]] [dp_get_options] (6): Option ldap_default_bind_dn has value cn=Administrator,cn=Users,dc=sssdad,dc=com (Thu May 26 17:09:49 2011) [sssd[be[AD]]] [dp_get_options] (6): Option ldap_default_authtok_type has value password (Thu May 26 17:09:49 2011) [sssd[be[AD]]] [dp_get_options] (6): Option ldap_default_authtok has a binary value. </snip> Verified functionality with correct & incorrect passwords in "ldap_default_authtok". Verified in version: # rpm -qi sssd | head Name : sssd Relocations: (not relocatable) Version : 1.5.1 Vendor: Red Hat, Inc. Release : 35.el5 Build Date: Wed 25 May 2011 08:03:59 PM IST Install Date: Thu 26 May 2011 03:52:52 PM IST Build Host: x86-008.build.bos.redhat.com Group : Applications/System Source RPM: sssd-1.5.1-35.el5.src.rpm Size : 3486777 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2011-0975.html