Help with FC15, ldap/ssl, and certs from CAcert.org

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi!

Just upgrading one client machine to FC15.

I have a variety of FC version throughout my network all
authenticating with LDAP over ssl.

I've configured the FC15 client to use ldaps and ssd and its not
working.  The ldap server uses a certificate from CAcert.org which
earlier versions of FC have always eaten just fine after adding the
proper root cert to /etc/pki/tls/cert.pem

In FC15, I also noticed that ldapsearch would not work, giving me an
error.

When I added debugging, I get the following error:

  TLS: certificate [E=support@xxxxxxxxxx,CN=CA Cert Signing
  Authority,OU=http://www.cacert.org,O=Root CA] is not valid - error
  -8172:Unknown code ___f 20.
  TLS: error: connect - force handshake failure: errno 0 - moznss error
  -8172
  TLS: can't connect: TLS error -8172:Unknown code ___f 20.

I've added the CAcert.org root cert in the same location and am now
getting this error.

I'll bet this error is also preventing my sssd from communicating with
my ldap server.

Does anyone know why FC15 would be giving me this error?

Thanks,

Bobby


-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux