[Fedora-directory-users] apache win32

[Mickael Besse]

I'm now trying to configure apache 2.2.0 install with xampp under windows 
2000.

With ldap it's ok but I ve got some probleme with SSL (again). In the log of 
apache, I have:

LDAP : an attemp to set LDAP_OPT_SSL on failed. Parameter Error.


did someone alreday configure apache (win32) with LDAPS???

_________________________________________________________________
Retrouvez tout en un clin d'oeil avec la barre d'outil MSN Search ! 
http://desktop.msn.fr/

[Rob Crittenden]

Mickael Besse wrote:
>  I'm now trying to configure apache 2.2.0 install with xampp under
>
>  windows 2000.
>  
>  With ldap it's ok but I ve got some probleme with SSL (again). In the 
>  log of apache, I have:
>  
>  LDAP : an attemp to set LDAP_OPT_SSL on failed. Parameter Error.
>  
>  
>  did someone alreday configure apache (win32) with LDAPS???
>   
I've never used Apache on win32 but is APR built with LDAP SSL support? 
If you set LogLevel to debug in Apache you should see a little blurb 
about it during startup.

rob

[Mickael Besse]

> I've never used Apache on win32 but is APR built with LDAP SSL
> support? If 
> you set LogLevel to debug in Apache you should see a little blurb about it 
> during startup.
>
> rob 

[Wed Jun 28 17:11:16 2006] [info] APR LDAP: Built with Microsoft 
Corporation. LDAP SDK
[Wed Jun 28 17:11:17 2006] [info] LDAP: SSL support unavailable: LDAP: CA 
certificates cannot be set using this method, as they are stored in the 
registry instead.

I v got this in log when apache start, so SSL  is unavailable. Is there 
something to do for changing this??

_________________________________________________________________
Windows Live Mail : venez tester la version bêta ! 
http://www.ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9...

[Graham Leggett]

Mickael Besse wrote:

>  [Wed Jun 28 17:11:16 2006] [info] APR LDAP: Built with Microsoft 
>  Corporation. LDAP SDK
>  [Wed Jun 28 17:11:17 2006] [info] LDAP: SSL support unavailable: LDAP: 
>  CA certificates cannot be set using this method, as they are stored in 
>  the registry instead.
>  
>  I v got this in log when apache start, so SSL  is unavailable. Is there 
>  something to do for changing this?? 
Looks like you have a LDAPTrustedGlobalCert or LDAPTrustedClientCert 
directive in there somewhere.

The Microsoft LDAP SDK reads server, CA and client certificates from the 
registry, you cannot set these from within Apache, and if you try to, 
you get the error above. I don't know where in the registry, the 
Microsoft LDAP SDK docs should explain this though.

(You are falling victim to the annoyingly inconsistent way that SSL and 
TLS is supported between FDS, OpenLDAP, Novell, MS and Sun LDAP client 
libraries).

Regards,
Graham
--