[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Install CA Certificate

To: Aaron Smith <Aaron.Smith@kzoo.edu>
Subject: Re: Install CA Certificate
From: Aaron Richton <richton@nbcs.rutgers.edu>
Date: Thu, 12 Oct 2006 18:19:47 -0400 (EDT)
Cc: openldap-software@openldap.org
In-reply-to: <233A7073D242D441BE64C93F9C525CBE04B59FE6@KEXCHANGE.knet.kzoo.edu>
References: <233A7073D242D441BE64C93F9C525CBE04B59FE6@KEXCHANGE.knet.kzoo.edu>

Where do I need to put a CA certificate so that Openldap can find it
properly?  I have openldap version 2.3.27 that was compiled using
openssl support on a Solaris 10 machine.  Trying to do secure LDAP
transactions with ldapsearch results in

SSL initialization failed: error -8192 (An I/O error occurred during
security authorization.)

I'd try "-d -1" to see what the client is thinking, or possibly truss to see if you and it are disagreeing as to the location of ldap.conf, and (if ldap.conf is getting opened properly) to see if the open() on the CACERT is working.

With that said, I don't think I've ever seen a message like that from OpenLDAP ldapsearch(1). Are you sure you aren't running Solaris 10's /usr/bin/ldapsearch instead?

Follow-Ups:
- Re: Install CA Certificate
  - From: "Francisco Saito" <fksaito@gmail.com>

References:
- Install CA Certificate
  - From: "Aaron Smith" <Aaron.Smith@kzoo.edu>

Prev by Date: ldap_add_ext_s and Error 17
Next by Date: Re: slapd-relay and slapo-rwm questions
Index(es):
- Chronological
- Thread