[CentOS] SSSD Passwd change problem

Mon May 12 19:02:42 UTC 2014
Eric Falbe <ericf706 at gmail.com>

Hi,

I have sssd set up and it mostly works how I would expect, but the
ldap_chpass_uri does not seem to work correctly with the passwd command.

I have two configs, one working and one not:

Working:
ldap_uri = ldap://ldap.example.com
ldap_chpass_uri = ldap://ldap.example.com

Non Working:
ldap_uri = ldap://ldap3.example.com,ldap://ldap2.example.com,ldap://
ldap.example.com
ldap_chpass_uri = ldap://ldap.example.com

ldap.example.com is the master ldap server, and the other two are read-only
consumers.  I have the clients set up with sssd to use their local ldap
replication, except for changing their password.  With the non working
config the only thing I have changed is the ldap_uri.

The behavior seems like it is not using the ldap_chpass_uri directive.  I
can post more of the config  files if needed.

When I use the passwd command to update a password, the first config
snippet works as expected, whereas the second does not.  Any ideas?

Thanks,
Eric Falbe