Dan Weintraub wrote: > Hi all, > > I'm trying to setup replication over ssl and am running into problems. I > first tried it unencrypted and all worked fine. I then copied over the > consumer's CA certificate and set up replication with SSL and Simple > Authentication. It doesn't work and I now get the following errors: > > When I set it up: > supplier error log: > [01/Jun/2009:01:00:00 -0000] NSMMReplicationPlugin - agmt="cn=One" > (fds:389): Simple bind failed, LDAP sdk error 81 (Can't contact LDAP > server), Netscape Portable Runtime error -5938 (Encountered end of file.) > > these appear thereafter: > consumer access log: > [01/Jun/2009:01:01:01 -0000] conn=898 fd=64 slot=64 connection from > 10.1.1.100 to 10.1.1.101 > [01/Jun/2009:01:01:01 -0000] conn=898 op=-1 fd=64 closed error 71 > (Protocol error) - B1 > > consumer error log: > [01/Jun/2009:01:01:01 -0000] - conn=898 received a non-LDAP message (tag > 0x80, expected 0x30) Looks like an attempt to use SSL on the non-SSL port (port 389) > > Versions: > Supplier: > fedora-ds-1.1.2-1.fc6 > fedora-ds-dsgw-1.1.1-1.fc6 > fedora-ds-base-1.1.3-2.fc6 > fedora-ds-admin-1.1.6-1.fc6 > fedora-ds-admin-console-1.1.2-1.fc6 > fedora-ds-console-1.1.2-1.fc6 > > Consumer: > fedora-ds-admin-1.1.7-3.fc6 > fedora-ds-admin-console-1.1.3-1.fc6 > fedora-ds-base-1.2.0-2.fc6 > fedora-ds-dsgw-1.1.2-1.fc6 > fedora-ds-console-1.2.0-1.fc6 > fedora-ds-1.1.3-1.fc6 > > I'm at a loss as to how to proceed with troubleshooting and would > appreciate any suggestions. > > Thanks, > Dan Weintraub > > > > -- > 389 users mailing list > 389-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3258 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20090609/1c5ee36f/attachment.bin
