[389-users] Problems with replication over SSL

[Rich Megginson]

Dan Weintraub wrote:
> Hi all,
>
> I'm trying to setup replication over ssl and am running into problems. I
> first tried it unencrypted and all worked fine. I then copied over the
> consumer's CA certificate and set up replication with SSL and Simple
> Authentication. It doesn't work and I now get the following errors:
>
> When I set it up:
> supplier error log:
> [01/Jun/2009:01:00:00 -0000] NSMMReplicationPlugin - agmt="cn=One"
> (fds:389): Simple bind failed, LDAP sdk error 81 (Can't contact LDAP
> server), Netscape Portable Runtime error -5938 (Encountered end of file.)
>
> these appear thereafter:
> consumer access log:
> [01/Jun/2009:01:01:01 -0000] conn=898 fd=64 slot=64 connection from
> 10.1.1.100 to 10.1.1.101
> [01/Jun/2009:01:01:01 -0000] conn=898 op=-1 fd=64 closed error 71
> (Protocol error) - B1
>
> consumer error log:
> [01/Jun/2009:01:01:01 -0000] - conn=898 received a non-LDAP message (tag
> 0x80, expected 0x30)
Looks like an attempt to use SSL on the non-SSL port (port 389)
>
> Versions:
> Supplier:
> fedora-ds-1.1.2-1.fc6
> fedora-ds-dsgw-1.1.1-1.fc6
> fedora-ds-base-1.1.3-2.fc6
> fedora-ds-admin-1.1.6-1.fc6
> fedora-ds-admin-console-1.1.2-1.fc6
> fedora-ds-console-1.1.2-1.fc6
>
> Consumer:
> fedora-ds-admin-1.1.7-3.fc6
> fedora-ds-admin-console-1.1.3-1.fc6
> fedora-ds-base-1.2.0-2.fc6
> fedora-ds-dsgw-1.1.2-1.fc6
> fedora-ds-console-1.2.0-1.fc6
> fedora-ds-1.1.3-1.fc6
>
> I'm at a loss as to how to proceed with troubleshooting and would
> appreciate any suggestions.
>
> Thanks,
> Dan Weintraub
>
>
>
> -- 
> 389 users mailing list
> 389-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20090609/1c5ee36f/attachment.bin>