1

I am setting up FreeIPA on SUSE. I have one server and one client. I installed slapd on the server with these configs:

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/rfc2307bis.schema
include         /etc/openldap/schema/yast.schema
pidfile         /run/slapd/slapd.pid
argsfile        /run/slapd/slapd.args
access to dn.base=""
        by * read

access to dn.base="cn=Subschema"
        by * read
access to attrs=userPassword,userPKCS12
        by self write
        by * auth
access to attrs=shadowLastChange
        by self write
        by * read
access to *
        by * read
database        bdb
suffix          "dc=test,dc=org"
checkpoint      1024    5
cachesize       10000
rootdn          "cn=Manager,dc=test,dc=org"
rootpw          secret
directory       /var/lib/ldap
index   objectClass     eq

On the client side, when I start sssd I get this error and fail:

Oct 18 10:01:55 idp-client.test.org sssd[17694]: (Sat Oct 18 10:01:55 2025) [sssd] [ldb] (0x0400): asq: Unable to register control with rootdse

This is my sssd config on the client:

[sssd]
debug_level = 9
domains = test.org
services = nss, pam

[domain/test.org]
id_provider = ldap
auth_provider = ldap
ldap_uri = ldap://idp-server.test.org
ldap_search_base = dc=test,dc=org

Can you please help me in this regard? I could not find an MOP in this regard. Can somebody provide me with the steps to install FreeIPA on SUSE from scratch?

Improve this question
New contributor
Ariaeimehr is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
1
  • I suggest you follow the guide on freeipa.org/page/Quick_Start_Guide . When I last installed and configured FreeIPA 4.x (4 years ago) it was on CentOS 7.9 and used EPEL package repositories for installing the FreeIPA programs and their dependencies (like the LDAP server). Then the ipa-server-install command (a python script) was available and did the heavy lifting of configuring the main components, including the LDAP server. I also got a cheap developer subscription to RedHat which gave me access to their repos. Might be more expensive now, though. Commented yesterday

0

Reset to default

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.