hi.. thanks for response... :)

i think the certificate is ok, because i have in same machine the email
server authenticating with this certificate (setting in
/etc/openldap/ldap.conf), but  i check the certificate FQND, and it's ok.

i check these parameter that you tell me, i have these value as "allow", i
change to "never" but i still can't connect :(

Thanks again!!!!! ;)

Salu2!!!


2007/10/24, Tomas Kuliavas <[EMAIL PROTECTED]>:
>
>
>
> maximatt wrote:
> >
> > hi....
> >
> > first, my gratefulnesses for this wonderfull piece of sofware :)
> >
> > but.. :(
> >
> > i have a problem when i try to use address bool via LDAP using stattls
> > feature...
> > i describe my problem and cofiguration above:
> >
> > context: red hat 4
> >              squirrelmail 1.4.10 or 1.5.1
> >              apache 2
> >              php 4.3.9
> >              sun one directory server v5.2
> >              configured openldap client to use ssl or tls connections
> >
> > if i use squirrelmaill v1.4.10: - i can connect to ldap server under
> port
> > 389 and without tls
> >                                             - i can't connect to ldap
> > server
> > under port 636
> >
> > if i use squirrelmail v1.5.1: - i can't connect to ldap server under
> port
> > 389 only
> >                                          - i can't connect to ldap
> server
> > under port 389 with tls
> >                                          - i can't connect to ldap
> server
> > under port 636
> >
>
> By default LDAP clients verify name written in LDAP server certificate.
> They
> refuse to connect, if name written on certificate does not match used
> hostname. See TLS_REQCERT documentation in your ldap.conf manual or make
> sure that certificate is valid.
>
> --
> Tomas
> --
> View this message in context:
> http://www.nabble.com/ERROR%3A-Unable-to-Bind-to-LDAP-Server-tf4680345.html#a13383334
> Sent from the squirrelmail-users mailing list archive at Nabble.com.
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> --
> squirrelmail-users mailing list
> Posting Guidelines:
> http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
> List Address: [email protected]
> List Archives:
> http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
> List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>



-- 
Salu2 ;)
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to