[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SSL + Replica



At 09:55 AM 9/9/2004, Quanah Gibson-Mount wrote:


>--On Thursday, September 09, 2004 2:09 PM +0200 Andreas Zimmermann <And.Zimmermann@web.de> wrote:
>
>>Hi everybody!
>>I´ve got a problem using tls for replication.
>>First of all I´ve setted up 2 hosts with openldap and tls. Both work
>>fine. Now  Im stuck setting up replica via tls. I´ve added those lines on
>>master:
>>
>>replica host=rincewind.octo-soft.de:636
>>binddn="cn=Manager,o=OctoSoft,dc=de"
>>bindmethod=simple credentials=secret
>>
>>and slurpd is starting up too.
>>When is start ldap on master the following lines appear in replicas log:
>>Sep  9 14:02:29 rincewind slapd[15158]: conn=17 fd=7 ACCEPT from
>>IP=192.168.42.11:1988 (IP=:: 636)
>>Sep  9 14:02:29 rincewind slapd[15158]: conn=17 fd=7 closed
>
>This looks like you are using SSL, not TLS.  Which one do you want?

SSL == TLS.

The problem here is that the user didn't select a mechanism
to establish TLS (SSL).  That is, neither selected Start TLS nor
ldaps://.



>If you want TLS, change the port to 389, and add "tls=yes" to the replica statement.
>
>--Quanah
>
>--
>Quanah Gibson-Mount
>Principal Software Developer
>ITSS/Shared Services
>Stanford University
>GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html