Package: libnss-ldap
Version: 255-1
Severity: important
Hi,
When upgrading from 251-7.5 libnss-ldap starts failing. Debug shows the
following:
ldap_connect_to_host: Trying 2001:610:1118:0:204:75ff:fe95:b60 389
ldap_connect_timeout: fd: 4 tm: 30 async: 0
ldap_ndelay_on: 4
ldap_is_sock_ready: 4
ldap_ndelay_off: 4
ldap_int_sasl_open: host=challenger.ipv6.spacelabs.nl
tls_write: want=73, written=73
0000: 16 03 01 00 44 01 00 00 40 03 01 46 51 6f ed 4f [EMAIL PROTECTED]
0010: 9c 6d 09 09 8e a8 5f 00 b6 a8 e2 26 c4 80 18 18 .m...¨_.¶¨â&Ä...
0020: 80 a3 8e 24 0e 39 27 9b 6d 78 ad 00 00 18 00 33 .£.$.9'.mx....3
0030: 00 16 00 39 00 2f 00 0a 00 35 00 05 00 04 00 32 ...9./...5.....2
0040: 00 13 00 38 00 66 02 01 00 ...8.f...
tls_read: want=5, got=0
TLS: can't connect.
ldap_err2string
ldap_err2string
Our ldap server is using a self-signed certificate and ``TLS_REQCERT never''
is specified in /etc/ldap/ldap.conf..
Yes i know, this is not the most secure setup and we should fix it sometime..
But it should still work :)
Sjoerd
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.20-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=nl_NL (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages libnss-ldap depends on:
ii debconf [debconf-2.0] 1.5.13 Debian configuration management sy
ii libc6 2.5-8 GNU C Library: Shared libraries
ii libkrb53 1.6.dfsg.1-4 MIT Kerberos runtime libraries
ii libldap2 2.1.30-13.4 OpenLDAP libraries
Versions of packages libnss-ldap recommends:
ii libpam-ldap 184-1 Pluggable Authentication Module al
ii nscd 2.5-8 GNU C Library: Name Service Cache
-- debconf information:
* libnss-ldap/dblogin: false
* libnss-ldap/override: false
* shared/ldapns/base-dn: ou=Users,dc=spacelabs,dc=nl
* shared/ldapns/ldap-server: 127.0.0.1
* libnss-ldap/confperm: false
* libnss-ldap/rootbinddn: cn=manager,dc=example,dc=net
* shared/ldapns/ldap_version: 3
libnss-ldap/binddn: cn=proxyuser,dc=example,dc=net
* libnss-ldap/nsswitch:
* libnss-ldap/dbrootlogin: true
