Hi list, I have some trouble with sssd after upgrading from Debian Jessie (stable) to Stretch (testing). I'm using sssd with LDAP (OpenLDAP servers running Debian Jessie) for NSS and PAM. NSS works just fine. getent passwd|group does return all users and groups stored in LDAP. PAM doesn't work. I get this error in the log: [sssd[be[LDAP]]] [fo_set_port_status] (0x0400): Marking port 389 of duplicate server 'ldap2.Domain.TLD' as 'working' [sssd[be[LDAP]]] [simple_bind_send] (0x0100): Executing simple bind as: uid=someuser,ou=user,dc=Sub,dc=Domain,dc=TLD [sssd[be[LDAP]]] [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server] /var/log/auth.log: sshd[13510]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.200.11 user=someuser sshd[13510]: pam_sss(sshd:auth): received for user someuser: 4 (System error) Old version: 1.11.7-3 (Debian) New version: 1.14.1-1 (Debian) I'm pretty sure that the connection to the LDAP server does work for NSS. After stopping sssd, deleting /var/lib/sss/db/* and starting sssd again it does fetch all users and groups from the directory. Any idea what's wrong? Cheers, Sascha