[Date Prev][Date Next]
Re: ldaps and Active Directory
Grant Sturgis wrote:
> ldap_bind: Can't contact LDAP server (-1)
> additional info: error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
> I have installed Certificate Services on the W2K domain controller and
> exported the CA Cert and copied the file to the linux
> box:/etc/openldap/cacerts. In /etc/openldap/ldap.conf I have tried:
> TLS_CACERTDIR /etc/openldap/cacerts
> TLS_CACERT /etc/openldap/cacerts/cacert.pem
Which OpenLDAP version are you using?
There have been fixes to SSL configuration in 2.3.12.