[pfx] Re: LDAP with TLS or SSL: postmap: "Unable to bind to server" openldap: "TLS negotiation failure"

On 06/05/2026 14:39, Tom via Postfix-users wrote:
> On 2026-05-06 06:01, John Fawcett via Postfix-users wrote:
>> I think you need to specify the port explicitly in the URL, else despite the ldaps schema, connection will go to the default ldap port 389. I believe that postfix ignores the server_port setting if you are using an URL in the server_host setting.
>>
>>      ldaps://ldap.redacted.com:636
> Thanks for replying. I did try that. No luck, either with 389 or 636.
> _______________________________________________
> Postfix-users mailing list [email protected]
> To unsubscribe send an email [email protected]

Hi

my suggestion would be to set debuglevel parameter which will then be 
passed to openldap client library and may provide some additional info. 
For suitable values, check the openldap documentation.

You might also try with start_tls = yes and connection to port 389. That 
might give some different error message or logging either in postfix or 
openldap log.

John

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]