ldap_id_mapping makes sssd-ad fail

January 2014


Table of Contents

The Problem
Investigation

On a test machine, I run Ubuntu Trusty, which is to be released in April. When in /etc/sssd/sssd.conf I set

<snip>
[domain/mydomain.com]	
  id_provider = ad
  auth_provider = ad
  # This is the culprit
  ldap_id_mapping = false
<snip>
      

, ... then sssd -i stops running after a few seconds, while it's supposed to keep running until I kill it. To make matters worse, neither service sssd start nor service sssd stop will return any more, and this makes my Puppet module run forever.