Skip to content

LDAP server returns Invalid Credentials after 25 seconds when using Notification Provider #128

@runleveldev

Description

@runleveldev
(2026-02-03 20:12:00): [be[LDAP]] [sdap_process_result] (0x2000): Trace: sh[0x6084a0d5ada0], connected[1], ops[0x6084a0d6ac60], ldap[0x6084a0d70490]
(2026-02-03 20:12:00): [be[LDAP]] [sdap_process_message] (0x4000): [RID#4] Message type: [LDAP_RES_BIND]
(2026-02-03 20:12:00): [be[LDAP]] [sdap_call_op_callback] (0x20000): [RID#4] Handling LDAP operation [2][server: [REDACTED:636] simple bind: [uid=REDACTED,dc=example,dc=com]] took [25275.316] milliseconds.
(2026-02-03 20:12:00): [be[LDAP]] [simple_bind_done] (0x1000): [RID#4] Server returned no controls.
(2026-02-03 20:12:00): [be[LDAP]] [simple_bind_done] (0x0400): [RID#4] Bind result: Invalid credentials(49), no errmsg set
(2026-02-03 20:12:00): [be[LDAP]] [sdap_op_destructor] (0x2000): [RID#4] Operation 2 finished
(2026-02-03 20:12:00): [be[LDAP]] [sdap_handle_release] (0x2000): [RID#4] Trace: sh[0x6084a0d5ada0], connected[1], ops[(nil)], ldap[0x6084a0d70490], destructor_lock[0], release_memory[0]
(2026-02-03 20:12:00): [be[LDAP]] [remove_connection_callback] (0x4000): [RID#4] Successfully removed connection callback.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_done] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Request handler finished [0]: Success
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_done] (0x20000): [RID#4] DP Request [PAM Authenticate #4]: Handling request took [25327.794] milliseconds.
(2026-02-03 20:12:00): [be[LDAP]] [_dp_req_recv] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Receiving request data.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_destructor] (0x0400): [RID#4] DP Request [PAM Authenticate #4]: Request removed.
(2026-02-03 20:12:00): [be[LDAP]] [dp_req_destructor] (0x0400): [RID#4] Number of active DP request: 0
(2026-02-03 20:12:00): [be[LDAP]] [dp_method_enabled] (0x0400): [RID#4] Target selinux is not configured
(2026-02-03 20:12:00): [be[LDAP]] [sbus_issue_request_done] (0x0400): sssd.dataprovider.pamHandler on /sssd from sssd.pam: Success

I had the following timeouts set in SSSD

ldap_connection_expire_timeout = 60
ldap_connection_expire_offset = 0
ldap_account_expire_policy = ad
ldap_network_timeout = 60
ldap_opt_timeout = 60
ldap_timeout = 60

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions