Re: Not able start TLS.

[Meghanand Acharekar <vasco.debian@gmail.com>]

Sorry for the spelling mistake

usingÂ/usr/local/libexec/slapd -s 256 -h "ldaps:///"

And getting the error "daemon: TLS not supported (ldaps:///)" is syslog,

I have searched mailing list, the one possible reason mentioned was "openldap is not compiled with TLS support" but I have verified this using ldd.

ldd /usr/local/libexec/slapdÂ

linux-vdso.so.1 => Â(0x00007fff1f7ff000)

libdb-4.7.soÂ=> /usr/lib/libdb-4.7.soÂ(0x00007f80960b4000)

libpthread.so.0 => /lib/libpthread.so.0 (0x00007f8095e98000)

libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00007f8095c7e000)

libdl.so.2 => /lib/libdl.so.2 (0x00007f8095a7a000)

libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007f8095843000)

libresolv.so.2 => /lib/libresolv.so.2 (0x00007f809562c000)

libwrap.so.0 => /lib/libwrap.so.0 (0x00007f8095423000)

libc.so.6 => /lib/libc.so.6 (0x00007f80950c2000)

/lib64/ld-linux-x86-64.so.2 (0x00007f8096428000)

libnsl.so.1 => /lib/libnsl.so.1 (0x00007f8094ea9000)

I'm not sure whether the problem in certificates could be the reason for this.

In my slapd.conf I've following lines related to TLS.

TLSCACertificateFile /usr/local/etc/openldap/ca-bundle.crt

TLSCertificateFile /usr/local/etc/openldap/slapd.pem

TLSCertificateKeyFile /usr/local/etc/openldap/slapd.pem

Regards,

Meghanand N. Acharekar

On Tue, May 10, 2011 at 8:50 PM, Quanah Gibson-Mount <quanah@zimbra.com> wrote:

--On Tuesday, May 10, 2011 4:56 PM +0530 Meghanand Acharekar <vasco.debian@gmail.com> wrote:

usingÂ/usr/local/libexec/slapd -s 256 -h "ldap:///"

daemon: TLS not supported (ldaps:///)

You didn't tell slapd to start with ldaps:///, you told it to start with ldap:///. ÂWhat exactly is the question?

--Quanah



--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra :: Âthe leader in open source messaging and collaboration