No, I don't. I don't have this on the RHEL3 machines either. Here is what my ldap.conf looks like for the machines that work: host myldapserver.umdnj.edu base o=something,o=UMDNJ,c=US ssl start_tls pam_password md5 When I use the same thing on EL 4, it doesn't work. I have to disable ssl start_tls... Ryan -----Original Message----- From: James Cooley [mailto:jcooley@xxxxxxx] Sent: Wednesday, May 11, 2005 5:02 PM To: golharam@xxxxxxxxx; General Red Hat Linux discussion list Subject: Re: RHEL4, LDAP, TLS Ryan, Do you have your Certificate Authority Certificate defined in /etc/ldap.conf? The line looks similar to the following: tls_cacertfile /etc/certs/myCACert.cer And is the CACertificate file readable by everyone? Check those two items first, and if they don't solve your issues, I'll think of other problem areas. --James Cooley Ryan Golhar wrote: >Hi all, > >I'm running into a problem and not sure what to do....hoping for some >guidance... > >I have an LDAP server (running RHEL3 AS) using OpenLDAP setup to use >ssl and tls. > >I have about 20 machines (RHEL3 WS) authenticating users via LDAP using >TLS > >I just installed RHEL4 WS on one machine and can't get it to >autheticate users via LDAP. I discovered that if I turn off "Use TLS" >using authconfig, I can then log in. > >I'm concerned that 1) the 20 machines running EL3 WS are >authenticating using TLS and the EL 4 WS isn't, or 2) TLS isn't >configured correctly and the EL3 WS are running without TLS. > >Is there a way I can check to make sure I have things set up correctly >to use TLS? > >Ryan > > > -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list