> what happens when you run certutil -L -d . on both servers? > in alias directory? > > try keeping the cert names consistent, that'll help in > troubleshooting. > Ok...after these commands: ******CA********* # ../shared/bin/certutil -N -d . # ../shared/bin/certutil -S -d . -n 'CA Certificate' -s 'cn=CAcert' -x -t CTu,CTu,CTu -g 1024 -m 1 -v 120 -2 -1 -5 ********Server 1******** # ../shared/bin/certutil -R -d . -s "cn=nodo1,dc=domain,dc=example,dc=com" -o tmpcertreq -g 1024 # ../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o tmpcert.der -m 3 -v 120 -1 -5 -8 domain.example.com # ../shared/bin/certutil -A -d . -n nodo1.domain.example.com -t u,u,u -i tmpcert.der *****Server 2******* # ../shared/bin/certutil -R -d . -s "cn=nodo2,dc=domain,dc=example,dc=com" -o tmpcertreq -g 1024 # ../shared/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o tmpcert.der -m 9 -v 120 -1 -5 -8 domain.example.com # ../shared/bin/certutil -A -d . -n Alt-Cert -t u,u,u -i tmpcert.der # certutil -L -d . CA Certificate Ctu,Ctu,CTu Nodo1.domain.example.com u,u,u Alt-Cert u,u,u *****MULTI MASTER REPLICATION***** ..after enabling ssl encrypt on both server...running mmr.pl script: ./mmr.pl --host1 nodo1.domain.example.com --host2 nodo2.domain.example.com --host1_id 1 --host2_id 2 --bindpw secret --repmanpw secret --create --with-ssl ******LOGS***** ..in nodo1 in logs: [11/Apr/2006:17:56:58 +0000] NSMMReplicationPlugin - agmt="cn="Replication to nodo2.domain.example.com"" (nodo2:636): Simple bind failed, LDAP sdk error 81 (Can't contact LDAP server), Netscape Portable Runtime error -12276 (Unable to communicate securely with peer: requested domain name does not match the server's certificate.) [11/Apr/2006:17:56:58 +0000] NSMMReplicationPlugin - agmt="cn="Replication to nodo2.domain.example.com"" (nodo2:636): Simple bind failed, LDAP sdk error 81 (Can't contact LDAP server), Netscape Portable Runtime error -12276 (Unable to communicate securely with peer: requested domain name does not match the server's certificate.) [11/Apr/2006:17:57:01 +0000] NSMMReplicationPlugin - agmt="cn="Replication to nodo2"" (nodo2:636): Simple bind failed, LDAP sdk error 81 (Can't contact LDAP server), Netscape Portable Runtime error -12276 (Unable to communicate securely with peer: requested domain name does not match the server's certificate.) ************CONSIDERATIONS**************** Modifing as suggested from Richard: ../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o tmpcert.der -m 3 -v 120 -1 -5 -8 domain.example.com <http://domain.example.com> It says: Bash: syntax error near unexpected token 'newline' ....I understood that the problem is how I wrote http , but I don't know how to change it Thanks in advance for your support ALex
