LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices

Reply
 
Search this Thread
Old 11-25-2008, 02:44 PM   #1
lykwydchykyn
Member
 
Registered: Mar 2006
Location: Tennessee, USA
Distribution: Debian, Ubuntu
Posts: 135

Rep: Reputation: 36
eDirectory auth with TLS on Debian apache


I have several Debian and SLES apache servers that have directories authenticating to our Netware eDirectory via authnz_ldap. It works fine when it's not encrypted, but when I try to use TLS encryption, only the SLES servers work.

The Debian boxes all log this error:
[LDAP: ldap_start_tls_s() failed][Connect error]

When I try doing an ldapsearch from the Debian boxes over TLS, I get this:
SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

The Apache documentation seems to suggest that I need to point to a certificate using something like LDAPTrustedGlobalCert, but I don't see the SLES servers doing this anywhere, and they appear to be working.

Can anyone give me a shove in the right direction here?
 
  


Reply

Tags
apache, debian, edirectory, ldap, tls


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix With SMTP-AUTH And TLS carlainz Linux - Software 0 05-21-2006 03:13 AM
Apache2 auth to eDirectory LinuxInductee Suse/Novell 1 12-02-2005 11:31 AM
Debian Exim4 SMTP Auth TLS? shaun_bakker Linux - Software 1 06-30-2005 11:04 AM
Using TLS with cyradm --auth login [GOD]Anck Linux - Software 0 03-08-2005 04:22 AM
Auth via LDAP on eDirectory jtweaker Linux - Networking 1 12-28-2004 08:18 AM


All times are GMT -5. The time now is 02:49 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration