This is locally on the FreeIPA server, so I would expect the certificate to be trusted. Why would one work and not the other?!
user@ipa:~$ ldapsearch -x -H LDAPS://ipa.domain.com:636 -D 'cn=Directory Manager' -W "(objectClass=*)" -b cn=config -s base nsslapd-allow-anonymous-access Enter LDAP Password: # extended LDIF # # LDAPv3 [...] # numResponses: 2 # numEntries: 1 user@ipa:~$ ldapmodify -x -D 'cn=Directory Manager' -W -H LDAPS://ipa.domain.com:636 Enter LDAP Password: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
