|
On 07/10/2013 12:16 PM, Alberto Viana
wrote:
Hi Noriko,
DS Base:389-Directory/ 1.3.1.3 B2013.189.1813 389 DS + Win2008 (I use my windows as CA)
The error came out again, so I decide to
investigate it.
The error:
[10/Jul/2013:10:52:23
-0300] NSMMReplicationPlugin - agmt="cn=AD-HMG1"
(hmg1:636): Trying secure slapi_ldap_init_ext
[10/Jul/2013:10:52:25 -0300] NSMMReplicationPlugin -
agmt="cn=AD-HMG1" (hmg1:636): binddn = CN=Conta de
sincronizacao do AD com LDAP
389,OU=APLICACOES,DC=homolog,DC=rnp, passwd =
{DES}Zdi9SkO9E8Jpy/LJq528zg==
[10/Jul/2013:10:52:25 -0300] slapi_ldap_bind - Error:
could not send bind request for id [CN=Conta de
sincronizacao do AD com LDAP
389,OU=APLICACOES,DC=homolog,DC=rnp] authentication
mechanism [SIMPLE]: error -1 (Can't contact LDAP server),
system error -5987 (Invalid function argument.), network
error 115 (Operation now in progress, host
"hmg1.homolog.rnp")
[10/Jul/2013:10:52:25 -0300] NSMMReplicationPlugin -
agmt="cn=AD-HMG1" (hmg1:636): Replication bind with SIMPLE
auth failed: LDAP error -1 (Can't contact LDAP server)
((unknown error code))
The error starts when I set the option "Check
hostname against name in certifcate for outbound SSL
connections" in Configuration -> Encryption tab.
If I uncheck this options, everything works fine again. As far
as I know, this option check if the CN of certificate is the
same of the host in the connection. Am I right?
Right.
I don´t thinks that is something with my certs,
because I have the same envoriment working fine with ds base
"389-Directory/ 1.2.10.12 B2012.210.1745" with
this options checked.
Either it's something with your certs, or something with your
hostname lookups (/etc/hosts, DNS, NIS, etc.)
I also set nsslapd-errorlog-level to "16384", but
it didn´t give me anything else.
What could be? There´s anything else that I can
provide to help to debug?
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
|
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
