Problem with openldap/pam & tls

[Ignacio Bernal <ibernal@unav.es>]

Hi,

i'm trying to configure a server (Redhat 7.3 & 2.4.20) with :

openldap-2.1.17
openssl-9.7b
pam_ldap-161
nss_ldap-203

I'm using the following ldap.conf file :

# cat ldap.conf

host ldap.server.domain.con
base            o=people,dc=domain,dc=com
scope           sub
timelimit       30
ldap_version    3
tls_reqcert allow
nss_map_attribute uid mailAcceptingGeneralId
pam_login_attribute mailAcceptingGeneralId
ssl on
ssl start_tls

Everithing works fine until I try to use tls, at this moment the server
lose contact with ldap server, and everything fail.

Any idea ?

Thanks in advance,
Iñaki