[phpldapadmin] [ phpldapadmin-Bugs-3213245 ] phpldapadmin inability to login to the TLS enabled slapd ser

"SourceForge.net" <[email protected]> Tue, 26 Apr 2011 13:25:05 +0000
Newsgroups gmane.comp.ldap.davedap
Message-ID <[email protected]>
Bugs item #3213245, was opened at 2011-03-16 00:20
Message generated for change (Comment added) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3213245&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
>Resolution: Works For Me
Priority: 5
Private: No
Submitted By: D W (darekwj)
Assigned to: Nobody/Anonymous (nobody)
Summary: phpldapadmin inability to login to the TLS enabled slapd ser

Initial Comment:
My Openldap runs on Debian Lenny. It is v 2.4.11-1+lenny2 OpenLDAP server

TLS is enabled with gnutls-bin v 2.4.2-6 and with following options in slapd.conf:

TLSCACertificateFile /etc/ssl/certs/slapd-ca-cert.pem
TLSCertificateFile   /etc/ssl/certs/slapd-server.crt
TLSCertificateKeyFile /etc/ssl/certs/slapd-server.key

When slapd is in TLS-based mode, authentication pam and nss is working properly.

There is a problem with phpldapadmin which has a problem with logging in, when slapd is in TLS mode (without TLS'a phpldapadmin works OK.).


I tried pla v 1.1.0.5 (on Debian lenny) and v 1.2.0.5 (on Debian Squeeze)
I get errors:
ldap_start_tls Unable to start TLS


[0.000]            page(0444-129): page::setsysmsg: Entered (a:3:{s:5:"title";s:
52:"Could not start TLS. ( LDAP Server)";s:4:"body";s:79:"<b>Error</b>: Could not start TLS. Please check your LDAP server configuration.";s:4:
"type";s:5:"
[0.002]            page(0444-129): page::setsysmsg: Entered (a:3:{s:5:"title";s:
62:"Unable to connect to LDAP server LDAP Server";s:4:"body";s
:60:"<b>Error</b>: Can't contact LDAP server (-1) for <b>user</b>";s:4:"type";s:
5:"error";})
[0.000]            page(0444-129): page::setsysmsg: Entered (a:3:{s:5:"title";s:
32:"Failed to Authenticate to server";s:4:"body";s:29:"Invalid Username or Passw
ord.";s:4:"type";s:5:"error";})


----------------------------------------------------------------------

>Comment By: Deon George (wurley)
Date: 2011-04-26 23:25

Message:
I have no problem using TLS with PLA. You can see it action on my demo site
http://wurley.demo.phpldapadmin.org - choose the TLS server.

Have you reviewed the documentaiton?
http://phpldapadmin.sourceforge.net/wiki/index.php/Server:server:tls

...deon

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3213245&group_id=61828

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/