Do you have a PTR record on windows DNS? I had read somewhere that ssl
checks forward and backwards queries. Altrough I didn't check it... The
other possibility is as small as one character error in certificate vs name
resolution.
 10 kwi 2013 13:36, "alexandre" <[email protected]> napisał(a):

> Hello,
>
> Thanks Grzegorz Dwornicki.
>
> I found the solution, but someone can explain me why this option gave me
> an error.
>
> I uncheck the box "Check hostname against name certificate for outboun SSL
> connections" in the "Encryption" tab (on both server side).
>
> Just to exemple, I have one server name "lab.go.local" and the second
> server name is "labbis.go.local".
> May be because I don't put all information in my "/etc/hosts" but I use a
> Windows DNS to resolve.
>
> Many thanks,
> Alex
>
>
> 2013/4/10 Grzegorz Dwornicki <[email protected]>
>
>>
>> https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Configuring_Logs.html
>>
>> Please look in this doc and increase the log verbosity. This might help.
>> 10 kwi 2013 13:15, "alexandre" <[email protected]> napisał(a):
>>
>>>  Hi,
>>>
>>> I'm having problem with my multi-master replication.
>>>
>>> I have on 389DS server in multi-master replication with a Windows DC
>>> (everything work fine).
>>>
>>> I try to put another 389DS in multi-master replication over startTLS
>>> (just to have redundancy).
>>>
>>> When I do the consumer initialization i've got this error:
>>>
>>> The consumer initializatiion has unsuccessfully completed. The error
>>> received by the replica is: -11 - System error.
>>>
>>> When I go to the /var/log/dirsrv/slapd-389ds/errors:
>>>
>>> slapi_ldap_bind - Error: could not send startTLS request: error -11
>>> (Connect error)
>>>
>>>
>>>
>>> Just an indication, I went in "manage certificate" on both 389DS server
>>> and I put the server cert and the CA cert, do I miss something ?
>>>
>>> Thanks,
>>> Alex
>>>
>>>
>>> --
>>> 389 users mailing list
>>> [email protected]
>>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>>
>>
>> --
>> 389 users mailing list
>> [email protected]
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>
>
> --
> 389 users mailing list
> [email protected]
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to