[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
SSL + openldap
Hi,
I use pam_ldap (tarball) for unix authentification and SSL for secure
transfert
I give you my slapd.conf, ldap.conf and my log (auth.log)
Have you an idea about why it don't work ???
Thanks
Philippe
PS : the ldap server log gave nothing and I start slapd with tis command
line : slapd -d 256 -h "ldap://127.0.0.1:389/ ldaps://127.0.0.1:636/"
SLAPD.CONF
**********
#TLSCipherSuite HIGH:MEDIUM:+SSLv2
TLSCertificateFile /opt/certificate/serveur_certificat/server.crt
TLSCertificateKeyFile /opt/certificate/serveur_key/server.key
TLSCACertificateFile /opt/certificate/autorite_certificat_signed/ca.crt
TLSVerifyClient demand
LDAP.CONF
*********
host XXX.XXX.XXX.XXX
base dc=XXXX,dc=XXXXX
uri ldap://127.0.0.1/
uri ldaps://127.0.0.1/
#uri ldapi://%2fvar%2frun%2fldapi_sock/
#ldap_version 3
binddn cn=Root,dc=XXXXXX,dc=XXX
bindpw XXXXX
#rootbinddn cn=manager,dc=padl,dc=com
port 636
scope sub
#scope one
#scope base
#timelimit 30
#bind_timelimit 30
#idle_timelimit 3600
AUTH.LOG
********
Aug 18 10:51:47 squid login[407]: pam_ldap:
ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT): Unknown error
Aug 18 10:51:47 squid login[407]: pam_ldap: _set_ssl_default_options
failed
Aug 18 10:51:47 squid login[407]: pam_ldap: ldap_simple_bind Can't
contact LDAP server
Aug 18 10:51:49 squid login[407]: pam_ldap: ldap_simple_bind Can't
contact LDAP server