Re: saslauthd + ldap can't connect TLS/SSL
Nels Lindquist <[email protected]> Mon, 4 Jul 2022 14:23:54 -0600
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
On 2022/07/01 2:05 p.m., Quanah Gibson-Mount wrote: >=20 >=20 > --On Thursday, June 30, 2022 12:38 PM -0600 Nels Lindquist=20 > <[email protected]> wrote: >=20 >> I've been unable to get saslauthd to connect to an OpenLDAP server using >> TLS/SSL. >=20 > What does the openldap log say (loglevel 256) for the connection? >=20 > --Quanah Here's an example from a corresponding saslauthd tls failure: Jun 29 13:50:51 edm-cmfe01 slapd[196929]: conn=3D5301 fd=3D20 ACCEPT from=20 IP=3D172.16.100.106:60280 (IP=3D0.0.0.0:389) Jun 29 13:50:51 edm-cmfe01 slapd[196929]: conn=3D5301 op=3D0 EXT=20 oid=3D1.3.6.1.4.1.1466.20037 Jun 29 13:50:51 edm-cmfe01 slapd[196929]: conn=3D5301 op=3D0 STARTTLS Jun 29 13:50:51 edm-cmfe01 slapd[196929]: conn=3D5301 op=3D0 RESULT oid=3D= =20 err=3D0 qtime=3D0.000007 etime=3D0.000045 text=3D Jun 29 13:50:51 edm-cmfe01 slapd[196929]: conn=3D5301 fd=3D20 closed (TLS=20 negotiation failure) Nels Lindquist ---- <[email protected]> ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/T27640ad37ae21468-Mbee440= 2555fe3485af2b53b0 Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription