It works now, I just added LDAPVerifyServerCert off LDAPTrustedMode SSL to httpd.conf. Thanks for your help. Loic -----Original Message----- From: Emmanuel Bailleul [mailto:Emmanuel.Bailleul@xxxxxxxxxxx] Sent: mercredi 2 juin 2010 15:53 To: users@xxxxxxxxxxxxxxxx Subject: RE: LDAP authnz with SSL > -----Message d'origine----- > De : ldescotte.ext@xxxxxxxxxxxxxxxxxx [mailto:ldescotte.ext@orange- > ftgroup.com] Envoyé : mercredi 2 juin 2010 12:15 À : > users@xxxxxxxxxxxxxxxx Objet : RE: LDAP authnz with SSL > > I didn't need to set any certificate file on JXPlorer but I can > connect to LDAP in https with the client, so I don't think it is > needed > > -----Original Message----- > From: Eric Covener [mailto:covener@xxxxxxxxx] > Sent: mercredi 2 juin 2010 12:11 > To: users@xxxxxxxxxxxxxxxx > Subject: Re: LDAP authnz with SSL > > On Wed, Jun 2, 2010 at 5:06 AM, <ldescotte.ext@xxxxxxxxxxxxxxxxxx> wrote: > > Here is the error i'm getting when i try to contact LDAP server with > > SSL > : > > > > [warn] [client ****] [12740] auth_ldap authenticate: user *** > > authentication failed; URI server2 [LDAP: ldap_simple_bind_s() > > failed][Can't contact LDAP server] > > > > Wouldn't you need to teach it about a trusted CA for the LDAP server > (LDAPTrustedGLobalCert)? > > -- > Eric Covener > covener@xxxxxxxxx > Hi, Rather than using JXPlorer, you may at least try with ldapsearch on the same box. Btw, have you configured your ldap.conf file for "TLS support" (the minimum being the "TLS_REQCERT" parameter) ? A quick google search gives for example (in French, but that may be of interest to you ...) : http://arnofear.free.fr/linux/template.php?tuto=2&page=5 Regards Emmanuel --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|