[Date Prev][Date Next] [Chronological] [Thread] [Top]

LDAP over TLS



Hi all,

I have followed the following link to configure LDAP with TLS:

https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ch-ldap-tls.html#ftn.id2691591

but when i run the search command: i.e., 
ldapsearch -x -b "dc=platalytics,dc=com" -H 'ldap://localhost:389' -ZZ

i get the following error:

ldap_start_tls: Protocol error (2)
additional info: unsupported extended operation

Following is my ldap.conf file:

#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE dc=platalytics,dc=com
URI ldap://127.0.0.1:389

#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never

# TLS certificates (needed for GnuTLS)
TLS_CACERT /etc/ldap/cacert.pem
TLS_REQCERT allow

TLSVerifyClient never

Following is my cn=config.ldif file:

# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 0cd16f20
dn: cn=config
objectClass: olcGlobal
cn: config

TLSCertificateFile: /etc/ldap/servercrt.pem
TLSCertificateKeyFile: /etc/ldap/serverkey.pem
TLSCACertificateFile: /etc/ldap/cacert.pem

olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: 59729584-bdf0-1034-90b9-fdf431101d87
creatorsName: cn=config
createTimestamp: 20150713211745Z
entryCSN: 20150713211745.443612Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20150713211745Z


Can anyone please help what could be the issue?