I agree when i used uri ldap with 389 port it was working but i want to connect to server on 636 port thats why i've changed my flie.<br> <br><br><div class="gmail_quote">2013/5/7 Grzegorz Dwornicki <span dir="ltr"><<a href="mailto:gd1100@gmail.com" target="_blank">gd1100@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">What was old uri? Did you change port aswell? </p>
<p dir="ltr">The error looks like result of trying using starttls on encrypted connection. Starttls works on 389 port. You need to leave ldap and 389 port in URL and then try to use starttls. This should work </p>
<div class="gmail_quote">7 maj 2013 10:52, "Aziza Lichir" <<a href="mailto:aziza.lichir@gmail.com" target="_blank">aziza.lichir@gmail.com</a>> napisał(a):<div><div class="h5"><br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
yes this is my file :<br>/etc/ldap.conf<br><br>uri ldaps://<a href="http://srv-ds-38.meyclub.net:636" target="_blank">srv-ds-38.meyclub.net:636</a><br>ssl start_tls<br>tls_cacertdir /etc/openldap/cacerts<br>pam_password crypt<br>
<br> and /etc/openldap/ldap.conf:<br>
<br>URI ldaps://<a href="http://srv-ds-38.meyclub.net:636" target="_blank">srv-ds-38.meyclub.net:636</a> --> i've tried with ldap and it was the same<br>BASE dc=meyclub,dc=net<br>TLS_CACERTDIR /etc/openldap/cacerts<br>
TLS_REQCERT allow<br>
<br><br><br><div class="gmail_quote">2013/5/7 Grzegorz Dwornicki <span dir="ltr"><<a href="mailto:gd1100@gmail.com" target="_blank">gd1100@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">Are you using LDAPS uri with -ZZ args?<br>
</p>
<div class="gmail_quote">7 maj 2013 10:18, "Aziza Lichir" <<a href="mailto:aziza.lichir@gmail.com" target="_blank">aziza.lichir@gmail.com</a>> napisał(a):<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
Hey,<br><br>I'm having problems with TLS/SSL on my client side. When I do ldapsearch -ZZ it works just fine and says that SSL started but when i try to authenticate a user I keep getting this strange error:<br><br>[07/May/2013:10:04:06 +0200] conn=95 fd=228 slot=228 SSL connection <br>
[07/May/2013:10:04:06 +0200] conn=95 SSL 256-bit AES<br>[07/May/2013:10:04:06 +0200] conn=95 op=0 EXT oid="1.3.6.1.4.1.1466.20037" name="startTLS"<br>[07/May/2013:10:04:06 +0200] conn=95 op=0 RESULT err=1 tag=120 nentries=0 etime=0<br>
[07/May/2013:10:04:06 +0200] conn=95 op=1 UNBIND<br>[07/May/2013:10:04:06 +0200] conn=95 op=1 fd=228 closed - U1<br><br><br>the plate form is :<br> server : <span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif"" lang="EN-US">CentOS-6.3-i386</span><br>
client: CentOS 5.3<br><br>[root@srv-ds-38 ~]# rpm -qi 389-ds-base<br>Name : 389-ds-base Relocations: (not relocatable)<br>Version : 1.2.11.15 Vendor: CentOS<br>Release : 14.el6_4 Build Date: Tue 16 Apr 2013 12:57:55 AM CEST<br>
Install Date: Fri 26 Apr 2013 04:05:26 PM CEST Build Host: <a href="http://c6b7.bsys.dev.centos.org" target="_blank">c6b7.bsys.dev.centos.org</a><br>Group : System Environment/Daemons Source RPM: 389-ds-base-1.2.11.15-14.el6_4.src.rpm<br>
Size : 4940881 License: GPLv2 with exceptions<br>Signature : RSA/SHA1, Tue 16 Apr 2013 11:32:27 AM CEST, Key ID 0946fca2c105b9de<br>Packager : CentOS BuildSystem <<a href="http://bugs.centos.org" target="_blank">http://bugs.centos.org</a>><br>
URL : <a href="http://port389.org/" target="_blank">http://port389.org/</a><br>Summary : 389 Directory Server (base)<br>Description :<br>389 Directory Server is an LDAPv3 compliant server. The base package includes<br>
the LDAP server and command line utilities for server administration.<br>
<br><br clear="all">I would appreciate some help.<br>-- <br><div dir="ltr"><div> </div>
<div> </div>
<div><b><br><br><br><br>___________________________________________________________</b></div>
<div> <b><font face="times new roman,serif" size="4"><i>Aziza Lichir</i></font></b></div>
<div><b><br></b></div></div>
<br></div></div><span><font color="#888888">--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org" target="_blank">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br></font></span></blockquote></div>
<br>--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org" target="_blank">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr"><div>
</div>
<div> </div>
<div><b><br><br><br><br>___________________________________________________________</b></div>
<div> <b><font face="times new roman,serif" size="4"><i>Aziza Lichir</i></font></b></div>
<div><b><br></b></div></div>
<br>--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org" target="_blank">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br></blockquote></div></div></div>
<br>--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br></blockquote></div><br><br clear="all"><br>-- <br><div dir="ltr"><div>
</div>
<div> </div>
<div><b><br><br><br><br>___________________________________________________________</b></div>
<div> <b><font face="times new roman,serif" size="4"><i>Aziza Lichir</i></font></b></div>
<div><b><br></b></div></div>