Sssd liefert Fehlermeldung -- ldapsearch funktioniert

...
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_id_op_connect_step] (0x4000): beginning to connect
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_server_status] (0x1000): Status of server '[server]' is 'name resolved'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_port_status] (0x1000): Port status of port [port] for server '[server]' is 'not working'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_port_status] (0x0100): Reseting the status of port [port] for server '[server]'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [fo_resolve_service_activate_timeout] (0x2000): Resolve timeout set to 10 seconds
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_server_status] (0x1000): Status of server '[server]' is 'name resolved'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [be_resolve_server_process] (0x1000): Saving the first resolved server
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [be_resolve_server_process] (0x0200): Found address for server [server]: [x.x.x.x] TTL 172800
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sss_ldap_init_send] (0x4000): Using file descriptor [20] for LDAP connection.
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_async_sys_connect_send] (0x0020): connect failed [13][Keine Berechtigung].
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sss_ldap_init_send] (0x0400): Setting 6 seconds timeout for connecting
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sss_ldap_init_sys_connect_done] (0x0020): sdap_async_sys_connect request failed.
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_sys_connect_done] (0x0020): sdap_async_connect_call request failed.
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_handle_release] (0x2000): Trace: sh[0x79b550], connected, ops[(nil)], ldap[(nil)], destructor_lock, release_memory
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [fo_set_port_status] (0x0100): Marking port [port] of server '[server]' as 'not working'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [fo_resolve_service_send] (0x0100): Trying to resolve service 'LDAP'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_server_status] (0x1000): Status of server '[server]' is 'name resolved'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [get_port_status] (0x1000): Port status of port [port] for server '[server]' is 'not working'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [fo_resolve_service_send] (0x0020): No available servers for service 'LDAP'  
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [be_resolve_server_done] (0x1000): Server resolution failed: 5
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_id_op_connect_done] (0x0020): Failed to connect, going offline (5 [Eingabe-/Ausgabefehler])
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [be_mark_offline] (0x2000): Going offline!
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [be_run_offline_cb] (0x0080): Going offline. Running callbacks.
(Mon Aug 12 10:28:22 2013) [sssd[be[LDAP]]] [sdap_id_op_connect_done] (0x4000): notify offline to op #1
...

caching is disabled
nss_files is always enabled
nss_compat is disabled
nss_db is disabled
nss_hesiod is disabled
 hesiod LHS = ""  
 hesiod RHS = ""  
nss_ldap is disabled
 LDAP+TLS is enabled
 LDAP server = "ldap://[server]:[port]/"  
 LDAP base DN = "dc=xx,dc=de"  
nss_nis is disabled
 NIS server = ""  
 NIS domain = ""  
nss_nisplus is disabled
nss_winbind is disabled
 SMB workgroup = ""  
 SMB servers = ""  
 SMB security = "user"  
 SMB realm = ""  
 Winbind template shell = "/bin/false"  
 SMB idmap range = "16777216-33554431"  
nss_sss is enabled by default
nss_wins is disabled
nss_mdns4_minimal is disabled
DNS preference over NSS or WINS is disabled
pam_unix is always enabled
 shadow passwords are enabled
 password hashing algorithm is sha512
pam_krb5 is disabled
 krb5 realm = "EXAMPLE.COM"  
 krb5 realm via dns is disabled
 krb5 kdc = "kerberos.example.com"  
 krb5 kdc via dns is disabled
 krb5 admin server = "[server]"  
pam_ldap is disabled
 LDAP+TLS is enabled
 LDAP server = "ldap://[server]:[port]/"  
 LDAP base DN = "dc=xx,dc=de"  
 LDAP schema = "rfc2307"  
pam_pkcs11 is disabled
 use only smartcard for login is disabled
 smartcard module = ""  
 smartcard removal action = ""  
pam_fprintd is disabled
pam_winbind is disabled
 SMB workgroup = ""  
 SMB servers = ""  
 SMB security = "user"  
 SMB realm = ""  
pam_sss is enabled by default
 credential caching in SSSD is enabled
 SSSD use instead of legacy services if possible is enabled
IPAv2 is disabled
IPAv2 domain was not joined
 IPAv2 server = ""  
 IPAv2 realm = ""  
 IPAv2 domain = ""  
pam_cracklib is enabled (try_first_pass retry=3 type=)
pam_passwdqc is disabled ()
pam_access is enabled ()
pam_mkhomedir or pam_oddjob_mkhomedir is enabled ()
Always authorize local users is enabled ()
Authenticate system accounts against network services is disabled

[domain/default]
ldap_id_use_start_tls = True
enumerate = True
cache_credentials = True
ldap_search_base = dc=xx,dc=de
krb5_realm = EXAMPLE.COM
krb5_server = kerberos.example.com
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_uri = ldap://[server]:[port]/
ldap_tls_cacertdir = /etc/openldap/certs
ldap_tls_reqcert = never

[domain/LDAP]
enumerate = true
cache_credentials = true
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_uri = ldap://[server]:[port]/
ldap_search_base = dc=xx,dc=de
ldap_id_use_start_tls = true
ldap_tls_cacertdir = /etc/openldap/certs
ldap_tls_reqcert = never
debug_level = 9

[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = LDAP

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
entry_cache_timeout = 300
entry_cache_nowait_percentage = 75

[pam]
reconnection_retries = 3
offline_credentials_expiration = 2
offline_failed_login_attempts = 5
offline_failed_login_delay = 5

[sudo]

[autofs]