SSL authentication to Active Directory via OpenLDAP client

--089e01419acc7664b204ebb08a65
Content-Type: text/plain; charset=ISO-8859-1

I have set up Active Directory to serve requests over SSL (ldaps://). Also,
I have generated the certificate files on Windows 2008 server.

(I have copied the self-signed certificate to test.cer)

I have downloaded test.cer file to my linux machine to use it with Openldap
client.

The .cer file is present in /etc/openldap/certs directory and the content
of ldap.conf file is

TLS_CACERTDIR   /etc/openldap/certs

However, when I issue an ldapsearch on the Active Directory I end up with
the following error:

ldapsearch -x -H ldaps://192.168.1.84:636 -D
CN=Administrator,CN=Users,DC=test,DC=ldap,DC=com -b
CN=Administrator,CN=Users,DC=test,DC=ldap,DC=com -w Admin123

ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

My question:
1) Is this how I use my *.cer file?
2) How do I convert it to a proper file recognized by openldap clients?
3) What am I missing? (Very new to ldap and Active Directory)
4) Any useful resource or documentation to get ldaps working?

Thanks.

--
Ashwin kumar
(http://ashwinkumar.me)

--089e01419acc7664b204ebb08a65
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I have set up Active Directory to serve requests over SSL =
(ldaps://). Also, I have generated the certificate files on Windows 2008 se=
rver.=A0<div><br></div><div>(I have copied the self-signed certificate to t=
est.cer)</div>
<div><br></div><div>I have downloaded test.cer file to my linux machine to =
use it with Openldap client.=A0</div><div><br></div><div>The .cer file is p=
resent in /etc/openldap/certs directory and the content of ldap.conf file i=
s=A0</div>
<div><br></div><div><font face=3D"courier new, monospace">TLS_CACERTDIR =A0=
 /etc/openldap/certs</font></div><div><br></div><div><div>However, when I i=
ssue an ldapsearch on the Active Directory I end up with the following erro=
r:<br>
</div><div><br></div><div><div><font face=3D"courier new, monospace">ldapse=
arch -x -H ldaps://<a href=3D"http://192.168.1.84:636">192.168.1.84:636</a>=
 -D CN=3DAdministrator,CN=3DUsers,DC=3Dtest,DC=3Dldap,DC=3Dcom -b CN=3DAdmi=
nistrator,CN=3DUsers,DC=3Dtest,DC=3Dldap,DC=3Dcom -w Admin123</font></div>
<div><font face=3D"courier new, monospace"><br></font></div><div><font face=
=3D"courier new, monospace">ldap_sasl_bind(SIMPLE): Can&#39;t contact LDAP =
server (-1)</font></div></div><div><div><div><br></div><div>My question:</d=
iv>
<div>1) Is this how I use my *.cer file?</div><div>2) How do I convert it t=
o a proper file recognized by openldap clients?</div><div>3) What am I miss=
ing? (Very new to ldap and Active Directory)</div><div>4) Any useful resour=
ce or documentation to get ldaps working?</div>
<div><br></div><div>Thanks.=A0</div><div><br clear=3D"all"><div><div dir=3D=
"ltr"><div>--</div><div>Ashwin kumar<br></div><div>(<a href=3D"http://ashwi=
nkumar.me" target=3D"_blank">http://ashwinkumar.me</a>)</div></div></div>
</div></div></div></div></div>

--089e01419acc7664b204ebb08a65--