Skip to content

LDAP server returns Invalid Credentials after 25 seconds when using Notification Provider #128

Description

@runleveldev
(2026-02-03 20:12:00): [be[LDAP]] [sdap_process_result] (0x2000): Trace: sh[0x6084a0d5ada0], connected[1], ops[0x6084a0d6ac60], ldap[0x6084a0d70490]
(2026-02-03 20:12:00): [be[LDAP]] [sdap_process_message] (0x4000): [RID#4] Message type: [LDAP_RES_BIND]
(2026-02-03 20:12:00): [be[LDAP]] [sdap_call_op_callback] (0x20000): [RID#4] Handling LDAP operation [2][server: [REDACTED:636] simple bind: [uid=REDACTED,dc=example,dc=com]] took [25275.316] milliseconds.
(2026-02-03 20:12:00): [be[LDAP]] [simple_bind_done] (0x1000): [RID#4] Server returned no controls.
(2026-02-03 20:12:00): [be[LDAP]] [simple_bind_done] (0x0400): [RID#4] Bind result: Invalid credentials(49), no errmsg set
(2026-02-03 20:12:00): [be[LDAP]] [sdap_op_destructor] (0x2000): [RID#4] Operation 2 finished
(2026-02-03 20:12:00): [be[LDAP]] [sdap_handle_release] (0x2000): [RID#4] Trace: sh[0x6084a0d5ada0], connected[1], ops[(nil)], ldap[0x6084a0d70490], destructor_lock[0], release_memory[0]
(2026-02-03 20:12:00): [be[LDAP]] [remove_connection_callback] (0x4000): [RID#4] Successfully removed connection callback.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_done] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Request handler finished [0]: Success
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_done] (0x20000): [RID#4] DP Request [PAM Authenticate #4]: Handling request took [25327.794] milliseconds.
(2026-02-03 20:12:00): [be[LDAP]] [_dp_req_recv] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Receiving request data.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_destructor] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Request removed.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_destructor] (0x0400): [RID#4] Number of active DP request: 0
(2026-02-03 20:12:00): [be[LDAP]] [dp_method_enabled] (0x0400): [RID#4] Target selinux is not configured
(2026-02-03 20:12:00): [be[LDAP]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler on /sssd from sssd.pam: Success

I had the following timeouts set in SSSD

ldap_connection_expire_timeout = 60
ldap_connection_expire_offset = 0
ldap_account_expire_policy = ad
ldap_network_timeout = 60
ldap_opt_timeout = 60
ldap_timeout = 60

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions