ldap_start_tls_s Local error

["Eric Parusel" <lists@globalrelay.net>]

Hello,

    I'm a user of a few different programs which use the OpenLDAP
libraries for LDAP access (with TLS in most cases) ....

I'm using a FreeBSD 4.3-RELEASE system, that I'm having problems with.
I'm using OpenLDAP 2.0.11 from the bsd ports collection, just compiled
a few moments ago.

Using pam_ldap-107, I get "ldap_start_tls_s Local error" errors on my
first login attempt (through ssh).  On the second attempt I am logged
in.

Using pam_ldap-120, I get
"ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT): Unknown error"
"_set_ssl_options failed"
"ldap_starttls_s: Local error"
errors.

Using mod_ldap (patched for tls support) from proftpd, I get "Starting
TLS Failed: Local error" errors every time a log in is attempted.
The call that fails is an ldap_start_tls_s call.

Is there a common explanation for the "Local error" error when using
ldap_start_tls_s ???


Is it safe to assume that the rest of my LDAP communication is
happening unencrypted?

Thanks,

Eric Parusel
Systems Administrator
Global Relay Communications