RE: freeradius with ldap and ssl

[Ron Wahler]

Anyone ever see this error and know how to correct it ?   TLS Critical extension is unavail.   What section ? am I missing a library ?   Wed Jul  2 09:48:11 2003 : Debug: rlm_ldap: attempting LDAP reconnection Wed Jul  2 09:48:11 2003 : Debug: rlm_ldap: (re)connect to 198.11.7.37:636, authentication 0 Wed Jul  2 09:48:11 2003 : Debug: rlm_ldap: setting TLS mode to 1 Wed Jul  2 09:48:11 2003 : Debug: rlm_ldap: starting TLS Wed Jul  2 09:48:12 2003 : Debug: rlm_ldap: ldap_start_tls_s() Wed Jul  2 09:48:12 2003 : Error: rlm_ldap: could not start TLS Criticial extension is unavailable Wed Jul  2 09:48:12 2003 : Error: rlm_ldap: (re)connection attempt failed Wed Jul  2 09:48:12 2003 : Debug: rlm_ldap: search failed       Ron.     -----Original Message----- From: Ron Wahler Sent: Tuesday, July 01, 2003 5:00 PM To: [EMAIL PROTECTED] Cc: Robert Morse Subject: RE: freeradius with ldap and ssl     Robert, Did you ever get this going ? can you share your config files  radiusd.conf ?   Ron.     -----Original Message----- From: Robert Morse [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 11, 2003 6:34 AM To: [EMAIL PROTECTED] Subject: Re: freeradius with ldap and ssl           I would suggest using port = 389, tls_mode = no and start_tls = yes That way you will use the StartTLS extended operation and not the old LDAPS     I just tried that and now I get this error from radiusd: modcall: entering group authorize rlm_ldap: - authorize rlm_ldap: performing user authorization for test_user radius_xlat:  '(uid=test_user)' radius_xlat:  'ou=people,dc=brown,dc=edu' ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to directory.cis-qas.brown.edu:389, authentication 0 rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Success rlm_ldap: (re)connection attempt failed rlm_ldap: search failed Should it matter that I am trying to connect to an Iplanet Directory server? Or is this only compatible with and OpenLdap server?