can't get apache to talk ldap to netware ldap server-HELP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,
  I am trying to get Apache 2.2.4(windows) to talk LDAP to my Netware 6.5sp6 server.  I get the following error when trying to connect

[Tue Apr 17 22:47:50 2007] [warn] [client 10.1.1.1] [3372] auth_ldap authenticate: user tonyg authentication failed; URI / [LDAP: ldap_simple_bind_s() failed][Unavailable]

this is what dstrace shows on the server

New TLS connection 0xa1e68a80 from 172.30.0.20:3648, monitor = 0x1c4, index = 12
Monitor 0x1c4 initiating TLS handshake on connection 0xa1e68a80
DoTLSHandshake on connection 0xa1e68a80
TLS accept failure 5 on connection 0xa1e68a80, setting err = -5875. Error stack: TLS handshake failed on connection 0xa1e68a80, err = -5875
BIO ctrl called with unknown cmd 7
Server closing connection 0xa1e68a80, socket error = -5875
Connection 0xa1e68a80 closed

are these errors cert issues?

Here is my apache config

(Global Config)
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA.pem
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA-SS.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA-SS.pem

(Directory Config)
<Directory "d:/websites/ldaptest">
AuthType basic
AuthBasicProvider ldap
AuthName "LdapTest"
AuthLDAPURL ldaps://fs0.ultra-fei.com:636/o=xyxx?cn?sub
AuthLDAPBindDN cn=admin,o=xyxx
AuthLDAPBindPassword xyxx
AllowOverride None
Order allow,deny
Allow from 172.30
Allow from 10.1
require valid-user
</Directory>

***********************************************
Tony Guadagno
Guadagno Consulting
tonyg@xxxxxxxxxxxx 
585.703.6700
***********************************************

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Tony Guadagno
EMAIL;WORK;PREF;NGW:tonyg@xxxxxxxxxxxx
N:Guadagno;Tony
END:VCARD


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux