CentOS - May 2014 - SSSD Passwd change problem

Hi,

I have sssd set up and it mostly works how I would expect, but the
ldap_chpass_uri does not seem to work correctly with the passwd command.

I have two configs, one working and one not:

Working:
ldap_uri = ldap://ldap.example.com
ldap_chpass_uri = ldap://ldap.example.com

Non Working:
ldap_uri = ldap://ldap3.example.com,ldap://ldap2.example.com,ldap://
ldap.example.com
ldap_chpass_uri = ldap://ldap.example.com

ldap.example.com is the master ldap server, and the other two are read-only
consumers.  I have the clients set up with sssd to use their local ldap
replication, except for changing their password.  With the non working
config the only thing I have changed is the ldap_uri.

The behavior seems like it is not using the ldap_chpass_uri directive.  I
can post more of the config  files if needed.

When I use the passwd command to update a password, the first config
snippet works as expected, whereas the second does not.  Any ideas?

Thanks,
Eric Falbe

On 12/05/2014 10:02 PM, Eric Falbe wrote:
> Hi,
> 
> I have sssd set up and it mostly works how I would expect, but the
> ldap_chpass_uri does not seem to work correctly with the passwd 
> command.
> 
> I have two configs, one working and one not:
> 
> Working:
> ldap_uri = ldap://ldap.example.com
> ldap_chpass_uri = ldap://ldap.example.com
> 
> Non Working:
> ldap_uri = ldap://ldap3.example.com,ldap://ldap2.example.com,ldap://
> ldap.example.com
> ldap_chpass_uri = ldap://ldap.example.com
> 
> ldap.example.com is the master ldap server, and the other two are 
> read-only
> consumers.  I have the clients set up with sssd to use their local ldap
> replication, except for changing their password.  With the non working
> config the only thing I have changed is the ldap_uri.
> 
> The behavior seems like it is not using the ldap_chpass_uri directive.  
> I
> can post more of the config  files if needed.
> 
> When I use the passwd command to update a password, the first config
> snippet works as expected, whereas the second does not.  Any ideas?
> 
> Thanks,
> Eric Falbe
Hello,

do you have this line:

chpass_provider = ldap


Regards,