Grant Sturgis wrote: > > ldap_bind: Can't contact LDAP server (-1) > additional info: error:14090086:SSL > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed > > > I have installed Certificate Services on the W2K domain controller and > exported the CA Cert and copied the file to the linux > box:/etc/openldap/cacerts. In /etc/openldap/ldap.conf I have tried: > > TLS_CACERTDIR /etc/openldap/cacerts > TLS_CACERT /etc/openldap/cacerts/cacert.pem
Which OpenLDAP version are you using? There have been fixes to SSL configuration in 2.3.12. Ciao, Michael.
