Hi Arthur, On Thu, Aug 28, 2014 at 11:19:24PM +0200, Arthur de Jong wrote: > On Thu, 2014-08-28 at 11:47 +0200, Andreas B. Mundt wrote: > > pynslcd fail to start here on debian-lan. I attach the debug log. > > This problem does not happen with nslcd, where things work. > > Thanks for reporting this. I've seen some issues in pynslcd in > combination with SSL/TLS. Sadly error messages are pretty obscure or > useless most of the time.
[...] > The unexpected length issue seems to be somewhat common in GnuTLS and > could even be related to certificate checking failing. > > Your nslcd.conf is basically the following? > > uri ldap://ldap > ssl start_tls > tls_cacertfile /etc/ldap/slapd.crt > tls_reqcert demand Yes: root@workstation00:/etc/init.d# grep -vE "^(#|$)" /etc/nslcd.conf uid nslcd gid nslcd uri ldap://ldap base dc=intern ssl start_tls tls_reqcert demand tls_cacertfile /etc/ldap/slapd.crt Best regards, Andi -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
