Package: libnss-ldap
Version: 261-2
Severity: normal

Hi,

i just tried upgrading one of my etch machine to lenny.
I reinstalled it from scratch, and copied few configuration
files (using FAI).


Relevant content of /etc/libnss-ldap.conf:
---
uri ldaps://ldapserver.mydomain.com
ldap_version 3
tls_cacertfile /etc/ssl/certs/SMP_Root_Certification_Authority.pem
---

It was working great, connection was made using SSL.
Now it connects using TLS instand of SSL, which fails on my
network.

Adding:
---
ssl on
---

resolves problem.


I wonder why, because manpage of libnss-ldap.conf documents
old behavior.

I had exactly the same issue with pam_ldap.conf (adding "ssl on"
resolved problem).



-- System Information:
Debian Release: lenny/sid
Architecture: i386 (i686)

Kernel: Linux 2.6.25-2-686 (SMP w/1 CPU core)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to pl_PL.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libnss-ldap depends on:
ii  debconf [debconf-2.0] 1.5.22             Debian configuration management sy
ii  libc6                 2.7-12             GNU C Library: Shared libraries
ii  libcomerr2            1.41.0-1           common error description library
ii  libkrb53              1.6.dfsg.4~beta1-3 MIT Kerberos runtime libraries
ii  libldap-2.4-2         2.4.10-2           OpenLDAP libraries
ii  libsasl2-2            2.1.22.dfsg1-21    Cyrus SASL - authentication abstra

Versions of packages libnss-ldap recommends:
ii  libpam-ldap                   184-4      Pluggable Authentication Module al
ii  nscd                          2.7-12     GNU C Library: Name Service Cache 

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to