I installed CentOS 7 on a brand new server. All my servers get end user authentication through LDAPS on various system as RHEL5, Debian, and Solaris. I noticed there is a new layer on CentOS 7 which is SSS above NSS and PAM. Anyway, I try to replicate the same type of connection as the other server.
ldapsearch -x is binding in LDAP, but not in LDAPS.
While digging the problem, I tried to do a connection in LDAP squeezing the SSS layer putting these lines in my
passwd: files ldap #sss shadow: files ldap #sss group: files ldap #sss
And I added this line in the
cache_credentials = False
And I restarted ssd.
systemctl restart sssd
I check with the command
authconfig --test and everything seems ok: (http://www.heypasteit.com/clip/1LZ2)