--On Thursday, September 28, 2017 2:18 PM -0700 Quanah Gibson-Mount quanah@symas.com wrote:

--On Thursday, September 28, 2017 4:41 PM -0400 Robert Heller heller@deepsoft.com wrote:

...

Will these spit out useful error messages? If I just get "TLS Negotiation failure" it is not going to be helpful.

However, you may have hit a known and unfixed bug in SSSD:

https://pagure.io/SSSD/sssd/issue/2896?cversion=0&cnum_hist=6

You may be better off using a better written piece of software.

--Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com