[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldaps and Active Directory

Did you also properly chmod to these two files, if necessary?

TLS_CACERTDIR /etc/openldap/cacerts
TLS_CACERT /etc/openldap/cacerts/cacert.pem


----- Original Message ----- From: "Michael Ströder" <michael@stroeder.com>
To: "Grant Sturgis" <gesturgis@hotmail.com>
Cc: <OpenLDAP-software@OpenLDAP.org>
Sent: Friday, December 09, 2005 2:07 AM
Subject: Re: ldaps and Active Directory

Grant Sturgis wrote:

ldap_bind: Can't contact LDAP server (-1) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I have installed Certificate Services on the W2K domain controller and exported the CA Cert and copied the file to the linux box:/etc/openldap/cacerts. In /etc/openldap/ldap.conf I have tried:

TLS_CACERTDIR /etc/openldap/cacerts
TLS_CACERT /etc/openldap/cacerts/cacert.pem

Which OpenLDAP version are you using? There have been fixes to SSL configuration in 2.3.12.

Ciao, Michael.