I just tried that and now I get this error from radiusd:I would suggest using port = 389, tls_mode = no and start_tls = yes That way you will use the StartTLS extended operation and not the old LDAPS
modcall: entering group authorize
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test_user
radius_xlat: '(uid=test_user)'
radius_xlat: 'ou=people,dc=brown,dc=edu'
ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to directory.cis-qas.brown.edu:389, authentication 0
rlm_ldap: starting TLS
rlm_ldap: ldap_start_tls_s()
rlm_ldap: could not start TLS Success
rlm_ldap: (re)connection attempt failed
rlm_ldap: search failed
Should it matter that I am trying to connect to an Iplanet Directory server?
Or is this only compatible with and OpenLdap server?
