Jeff Gamsby wrote: > > > Richard Megginson wrote: >> Jeff Gamsby wrote: >>> >>> I am having a hard time getting the admin console to work in ssl >>> mode. I get this "notice" error in the admin serv logs, is it a >>> cause for concern? As far as I know, everything is setup correctly. >>> >>> [notice] [client xxx.xxx.xxx.xxx] admserv_host_ip_check: >>> ap_get_remote_host could not resolve xxx.xxx.xxx.xxx >> This usually means reverse DNS is not working. >>> >>> I have created the certificates, >> Following the SSL howto at >> http://directory.fedora.redhat.com/wiki/Howto:SSL ? > > Yes, but instead of creating an admin-serv-<serverID>- I copied the > slapd-<serverID>- cert db's over. > It is true that I can use these same certs? I think so, but I've never tried it that way. > > I tried creating the admin certs db's seperately and importing the CA > cert, but that did't work either. > > I had this working a few weeks ago, I'm not sure what has changed. What, if anything, has changed? > >>> then copied the slapd-<server>-* files to admin-serv-*, then tried >>> to enable SSL in the admin console. I have followed the directions >>> from "Managing SSL and SASL" but I get the error "Invalid LDAP >>> Host/IP, could not connect to server in secure mode" when I change >>> to secure mode in the "User DS" tab. >> This error is from the console? Try using startconsole -D > Using this method I get this error: > > validateLDAPParams netscape.ldap.LDAPException: > JSSSocketFactory.makeSocket fds.server.example.com:636, > SSL_ForceHandshake failed: (-8054) Unknown error (91); Cannot connect > to the LDAP server >>> >>> Any suggestions? >>> >>> Thanks, >>> Jeff >>> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users at redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> ------------------------------------------------------------------------ >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060620/b7198f8d/attachment.bin
