Re: ldap_start_tls_s Local error

[Ignacio Coupeau <icoupeau@unav.es>]

Eric Parusel wrote:
> 
> Hello,
> 
>     I'm a user of a few different programs which use the OpenLDAP
> libraries for LDAP access (with TLS in most cases) ....
> 
> I'm using a FreeBSD 4.3-RELEASE system, that I'm having problems with.
> I'm using OpenLDAP 2.0.11 from the bsd ports collection, just compiled
> a few moments ago.
> 
> Using pam_ldap-107, I get "ldap_start_tls_s Local error" errors on my
> first login attempt (through ssh).  On the second attempt I am logged
> in.
> 
> Using pam_ldap-120, I get
> "ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT): Unknown error"
> "_set_ssl_options failed"
> "ldap_starttls_s: Local error"
> errors.
> 
> Using mod_ldap (patched for tls support) from proftpd, I get "Starting
> TLS Failed: Local error" errors every time a log in is attempted.
> The call that fails is an ldap_start_tls_s call.


I found the same error a couple of months... but the problem was an
extra set of ldap-pam libraries misplaced in /lib instead /usr/lib... or
several versions... misplaced....

the first log fail, the second runs...

-- 
____________________________________________________
Ignacio Coupeau, Ph.D.     e-mail: icoupeau@unav.es
CTI, Director              fax:    948 425619
University of Navarra      voice:  948 425600
Pamplona, SPAIN            http://www.unav.es/cti/