TLS and Directory Admin
Eric Sandall <[email protected]>
| Newsgroups | gmane.network.directoryadmin |
|---|---|
| Message-ID | <[email protected]> |
Hi all, I'm having problems getting DA to work with a TLS-enabled LDAP server. I can search my LDAP server through the CLI (with ldapsearch, so I know it works), but when I try to test my connection with DA, I get the following error (yes, I clicked the "Enable TLS" checkbox): Error enabling TLS on the LDAP connection And a popup which says, "Connection failed: Can't contact LDAP server". Now, I only have slapd listening for ldaps connections (port 636), so just in case, I added the port name to "Server address", and received this error when testing the connection: Broken pipe I haven't done any debugging or looking at code yet, just thought I'd shoot of an e-mail before I do to see if anyone else may know what's going on. If I tell slapd to listen for unencrypted connections, DA seems to connect as it reports, "Confidentiality required" when I try to test the connection. I then skipped the testing of the profile and saved the profile, then edited the profile to use TLS and tried to reconnect, which gave me a different report, "Could not connect to the directory: TLS appears not to be supported. Please disable TLS in your connection profile." (This is with unencrypted connections allowed, if I then only allow encrypted connections, DA says that it cannot connect to the LDAP server). If I specify the port after saving the profile, I can then test and try to connect and I do not receive the "Broken pipe" error unless I have slapd listening for encrypted connections, then I still get the error (it only crashes if I specify the port and try to connect to an encrypted-only slapd server). My thought is that SSL/TLS support /may/ be broken in DA. Anyone else? -sandalle -- PGP Key Fingerprint: FCFF 26A1 BE21 08F4 BB91 FAED 1D7B 7D74 A8EF DD61 http://search.keyserver.net:11371/pks/lookup?op=get&search=0xA8EFDD61 -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/E/IT$ d-- s++:+>: a-- C++(+++) BL++++VIS>$ P+(++) L+++ E-(---) W++ N+@ o? K? w++++>-- O M-@ V-- PS+(+++) PE(-) Y++(+) PGP++(+) t+() 5++ X(+) R+(++) tv(--)b++(+++) DI+@ D++(+++) G>+++ e>+++ h---(++) r++ y+ ------END GEEK CODE BLOCK------ Eric Sandall | Source Mage GNU/Linux Developer [email protected] | http://www.sourcemage.org/ http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU http://counter.li.org/ #196285 | http://www.shock.wsu.edu/ ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/