Hello,

I am trying to configure a openldap server with TLS/SSL. I installed and 
configured openldap initially without TLS/SSL and it worked perfect. Then I 
followed this link 
http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch31_:_Centralized_Logins_Using_LDAP_and_RADIUS
 to get TLS/SSL with openldap. I did all that was mentioned in that link but 
when I tried ldapsearch on the client machine it says:

[EMAIL PROTECTED] cacerts]# ldapsearch -d 10
  0000:  30 3e 02 01 01 63 39 04  00 0a 01 00 0a 01 00 02   0>...c9.........  
  0010:  01 00 02 01 00 01 01 00  87 0b 6f 62 6a 65 63 74   ..........object  
  0020:  63 6c 61 73 73 30 19 04  17 73 75 70 70 6f 72 74   class0...support  
  0030:  65 64 53 41 53 4c 4d 65  63 68 61 6e 69 73 6d 73   edSASLMechanisms  
ldap_write: want=64, written=64
  0000:  30 3e 02 01 01 63 39 04  00 0a 01 00 0a 01 00 02   0>...c9.........  
  0010:  01 00 02 01 00 01 01 00  87 0b 6f 62 6a 65 63 74   ..........object  
  0020:  63 6c 61 73 73 30 19 04  17 73 75 70 70 6f 72 74   class0...support  
  0030:  65 64 53 41 53 4c 4d 65  63 68 61 6e 69 73 6d 73   edSASLMechanisms  
ldap_read: want=8, got=8
  0000:  30 09 02 01 01 64 04 04                            0....d..          
ldap_read: want=3, got=3
  0000:  00 30 00                                           .0.               
ldap_read: want=8, got=8
  0000:  30 0c 02 01 01 65 07 0a                            0....e..          
ldap_read: want=6, got=6
  0000:  01 00 04 00 04 00                                  ......            
request done: ld 0x9b702a0 msgid 1
ldap_sasl_interactive_bind_s: No such attribute (16)

I don't know where is the problem. Why is it looking for SASL when I want only 
TLS/SSL no SASL (kerberos thing).
Please help.

Thanks in advance.
Regards
Deependral




 
____________________________________________________________________________________
Expecting? Get great news right away with email Auto-Check. 
Try the Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/newmail_tools.html 

Reply via email to