Re: problem with openldap ssl client

[Pat Riehecky <prieheck@iwu.edu>]

I would strongly recommend installing the updates.  At the minimum you
should install openssh-* apache2-* apparmor* dpkg libgnutls13 ufw
libldap*.  I would strongly recommend installing all of these updates as
several are security related.  In any case, the updates may help fix
your system.  I know the gnutls library contains a fix for you, perhaps
not for a bug you have, but nonetheless a fix is a fix.

Pat

On Tue, 2008-07-08 at 17:06 -0400, Sambuddho Chakravarty wrote:
> Hello Pat 
> This is what the outptut look like
> 
> Reading package lists... Done
> Building dependency tree       
> Reading state information... Done
> Calculating upgrade... Done
> The following NEW packages will be installed:
>   linux-image-2.6.24-19-server linux-ubuntu-modules-2.6.24-19-server
>   openssh-blacklist
> The following packages will be upgraded:
>   apache2-mpm-prefork apache2-utils apache2.2-common apparmor
> apparmor-utils
>   base-files bash bsdutils dpkg file friendly-recovery initramfs-tools
> klibc-utils
>   ldap-utils libdbus-1-3 libglib2.0-0 libgnutls13 libklibc libldap-2.4-2
> libmagic1
>   libntfs-3g23 libpam-modules libpam-runtime libparted1.7-1
> linux-image-server
>   linux-libc-dev linux-server lshw mount ntfs-3g openssh-client
> openssh-server
>   parted pciutils python-central sudo tzdata ufw update-manager-core
> util-linux
>   util-linux-locales x11-common
> 42 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
> Need to get 36.9MB of archives.
> After this operation, 82.0MB of additional disk space will be used.
> Do you want to continue [Y/n]? 
> 
> Also
>  I compiled the openldap-2.4.10 source code on the client (just to make
> sure that if there were some missing libraries , which were present in
> the server otherwise). But problem still persists. There is a new log
> message I see now 
> 
> pam_ldap:ldap_set_option(LDAP_OPT_X_TLS_CACERTFILE): Can't contact LDAP
> server
> pam_ldap: _set_ssl_default_options failed
> pam_ldap: ldap_set_option(LDAP_OPT_X_TLS) Can't contact LDAP server
> 
> 
> Thanks
> Sambuddho
> 
> 
> Thanks
> Sambuddho
> 
> n
> On Tue, 2008-07-08 at 15:51 -0500, Pat Riehecky wrote:
> > On Tue, 2008-07-08 at 16:45 -0400, Sambuddho Chakravarty wrote:
> > > Hello Pat
> > >  I think I am . I did apt-get update and tried a apt-get install
> > > libnss-ldap and it said you already have the latest packages.
> > > 
> > 
> > Ok, one more thing to check what does the output of 
> > 
> > apt-get -f dist-upgrade
> > 
> > report?
> > 
> > Pat
> > 
> > > Thanks
> > > Sambuddho
> > > On Tue, 2008-07-08 at 15:39 -0500, Pat Riehecky wrote:
> > > > On Tue, 2008-07-08 at 00:06 -0400, Sambuddho Chakravarty wrote:
> > > > > Hello
> > > > >  I have an openldap server running slapd on 636 (LDAPS) . When I connect
> > > > > from a ldap browser , I am able to successfully browse the database.
> > > > > However when I try to connect from a linux client machine (Ubuntu Server
> > > > > 8.04) I am not able to connect to the ldaps. However regular ldap works
> > > > > fine.
> > > > 
> > > > There was a problem with the original 8.04 ldap packages (I think it was
> > > > actually gnutls related but memory fails).  Are you on the latest and
> > > > greatest packages?  
> > > > 
> > > > Pat
> > > > 
> > > 
> > > 
> > 
> 
>