LinuxQuestions.org - LDAP connection problems after enabling TLS

- Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)

- - LDAP connection problems after enabling TLS (https://www.linuxquestions.org/questions/linux-software-2/ldap-connection-problems-after-enabling-tls-641405/)

LDAP connection problems after enabling TLS

Hi.

I've just set up an LDAP server, and it was working fine until I enabled SSL/TLS. The LDAP server and my test LDAP client should be set up correctly according to the manual, but I seem to have missed something.

Since enabling TLS I'm no longer allowd to log onto my LDAP client. The error messeage says "Connection closed by 127.0.0.1".

However, when issuing the command "ldapsearch -x -H 'ldaps://<ldap-server>'" the query is successful.

I've installed a CA signed server certificate on the LDAP server, and installed the CA certificate on the LDAP client.

As I'm quite new to LDAP I could use som advice on how to debug this. Thanks in advance.

The last time i checked openldap was very funny when using self signed certificates just could not get it to work.

Quote:

Originally Posted by datopdog (Post 3149845)

The last time i checked openldap was very funny when using self signed certificates just could not get it to work.

Actually, the (server) certificate were signed by our local CA. :/

Turns out that I'd used the LDAP server's ip-address instead of it's FQDN when configuring the client. This is apperantly not correct according to http://www.rfc-editor.org/rfc/rfc2830.txt

So the solution was simply to issue "authconfig-tui", and replace the LDAP server's IP address with it's FQDN.