title: sssd Error: Could not start TLS encryption. (unknown error code)
body: <p>I am trying to configure Linux machine authentication with Google secure LDAP, adding the steps below that I have done</p>
  
  <p><strong>Added the LDAP client with below permission:</strong></p>
  
  <ol>
  <li>Access permission: Entire Domain</li>
  <li>Read user information: Entire Domain</li>
  <li>Read group information: ON</li>
  </ol>
  
  <p><strong>Installed SSSd in my Ubuntu box(which is running in Azure)</strong></p>
  
  <p><code>sudo apt install -y sssd sssd-tools</code></p>
  
  <p><strong>My sssd.conf file</strong></p>
  
  <pre><code>[sssd]
  debug_level = 7
  services = nss, pam
  domains = mydomain.com
  
  [pam]
  debug_level = 7
  
  [nss]
  debug_level = 7
  
  [domain/mydomain.com]
  debug_level = 7
  cache_credentials = true
  ldap_id_use_start_tls = true
  ldap_tls_cacertdir = /home/ubuntu/ssl_Linux
  ldap_tls_cacert = /home/ubuntu/ssl_Linux/gldap.crt
  ldap_tls_cert = /home/ubuntu/ssl_Linux/gldap.crt
  ldap_tls_key = /home/ubuntu/ssl_Linux/gldap.key
  ldap_uri = ldaps://ldap.google.com:636
  ldap_search_base = ou=Users,dc=mydomain,dc=com
  ldap_group_name = uniqueMember
  id_provider = ldap
  auth_provider = ldap
  ldap_schema = rfc2307bis
  ldap_user_uuid = entryUUID
  ldap_groups_use_matching_rule_in_chain = true
  ldap_initgroups_use_matching_rule_in_chain = true
  enumerate = false
  </code></pre>
  
  <p>Here I'm able to start the SSSD service bt getting the below error</p>
  
  <pre><code>Nov 15 09:14:54 myserver systemd[1]: Started System Security Services Daemon.
  Nov 15 09:14:55 myserver sssd[be[67530]: Could not start TLS encryption. (unknown error code)
  Nov 15 09:16:11 myserver sssd[be[67530]: Could not start TLS encryption. (unknown error code)
  Nov 15 09:16:11 myserver sssd[be[67530]: Backend is offline
  Nov 15 09:17:19 myserver sssd[be[67530]: Could not start TLS encryption. (unknown error code)
  Nov 15 09:19:48 myserver sssd[be[67530]: Could not start TLS encryption. (unknown error code)
  Nov 15 09:24:02 myserver sssd[be[67530]: Could not start TLS encryption. (unknown error code)
  </code></pre>
  
  <p><strong>FYI:</strong> I'm able to successfully authenticate with the google secure LDAP using below command</p>
  
  <pre><code>LDAPTLS_CERT=mycrt.crt LDAPTLS_KEY=mykey.key ldapsearch -H ldaps://ldap.google.com:636 -b "ou=Users,dc=mydomain,dc=com" -D "my.user@mydomain.com" "(uid=my.user)" -W
  </code></pre>
  
  <p><strong>Refrance</strong>: <a href="https://helpcenter.itopia.com/en/articles/2394004-configuring-google-cloud-identity-ldap-on-ubuntu-16-04-for-user-logins" rel="nofollow noreferrer">https://helpcenter.itopia.com/en/articles/2394004-configuring-google-cloud-identity-ldap-on-ubuntu-16-04-for-user-logins</a></p>
  
  <p>Please help me on this,</p>
  
  <p>Thanks :)</p>