Hi All,
my ldapsearch and other things were working perfectly fine but not sure what happened now. Seem some SSL issue. When i am doing ldapsearch i am getting below error.
[root@xxx-xxx-xxx etc]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /usr/local/openldap/dit.ldif -H ldaps://xxx-xxx-xxx.example.com
Enter LDAP
Password:
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
Logs error:
TLS trace: SSL_accept:SSLv3 flush data
tls_read: want=5 error=Resource temporarily unavailable
TLS trace: SSL_accept:error in SSLv3 read client certificate A
TLS trace: SSL_accept:error in SSLv3 read client certificate A
531ecbee daemon: activity on 1 descriptor
531ecbee
daemon: activity on:531ecbee
531ecbee daemon: epoll: listen=7 active_threads=0 tvp=zero
531ecbee daemon: activity on 1 descriptor
531ecbee daemon: activity on:531ecbee 11r531ecbee
531ecbee daemon: read active on 11
531ecbee daemon: epoll: listen=7 active_threads=0 tvp=zero
531ecbee connection_get(11)
531ecbee connection_get(11): got connid=1000
531ecbee connection_read(11): checking for input on id=1000
tls_read: want=5, got=5
0000: 15 03 01 00 02
.....
tls_read: want=2, got=2
0000: 02 30 .0
TLS trace: SSL3 alert read:fatal:unknown CA
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
TLS trace: SSL_accept:failed in SSLv3 read client certificate A
TLS: can't accept: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca.
531ecbee connection_read(11): TLS
accept failure error=-1 id=1000, closing
531ecbee connection_closing: readying conn=1000 sd=11 for close
531ecbee connection_close: conn=1000 sd=11
531ecbee daemon: removing 11
531ecbee daemon: activity on 1 descriptor
531ecbee daemon: activity on:531ecbee
531ecbee daemon: epoll: listen=7 active_threads=0 tvp=zero
Please suggest.
Regards
Sam