Lance Kinley created DIRSERVER-2001:
---------------------------------------

             Summary: Replication using TLS does not work when confidentiality 
is enforced
                 Key: DIRSERVER-2001
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2001
             Project: Directory ApacheDS
          Issue Type: Bug
    Affects Versions: 2.0.0-M17
         Environment: Ubuntu 14.04.1
            Reporter: Lance Kinley


Replication was set up and working and TLS enabled in replication consumers.

I changed the ads-confidentialityrequired attribute to TRUE and replication 
fails:

[15:09:08] INFO [org.apache.directory.server.CONSUMER_LOG] - Consumer 0 
connected to producer lmldap:10389
[15:09:08] WARN [org.apache.directory.server.CONSUMER_LOG] - Failed to bind to 
the producer lmldap:10389 with the given bind Dn uid=admin,ou=system
[15:09:08] WARN [org.apache.directory.server.CONSUMER_LOG] -
org.apache.directory.api.ldap.model.exception.LdapAuthenticationNotSupportedException:
 Confidentiality (TLS secured connection) is required.

It appears the bind for the replication is happening before TLS is set up or 
TLS is not actually being used even though the ads-replusetls is TRUE.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to