Re: ERROR: Unable to Bind to LDAP Server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



hi.. thanks for response... :)

i think the certificate is ok, because i have in same machine the email server authenticating with this certificate (setting in /etc/openldap/ldap.conf), but  i check the certificate FQND, and it's ok.

i check these parameter that you tell me, i have these value as "allow", i change to "never" but i still can't connect :(

Thanks again!!!!! ;)

Salu2!!!


2007/10/24, Tomas Kuliavas <tokul@xxxxxxxxxxxxxxxxxxxxx>:


maximatt wrote:
>
> hi....
>
> first, my gratefulnesses for this wonderfull piece of sofware :)
>
> but.. :(
>
> i have a problem when i try to use address bool via LDAP using stattls
> feature...
> i describe my problem and cofiguration above:
>
> context: red hat 4
>              squirrelmail 1.4.10 or 1.5.1
>              apache 2
>              php 4.3.9
>              sun one directory server v5.2
>              configured openldap client to use ssl or tls connections
>
> if i use squirrelmaill v1.4.10: - i can connect to ldap server under port
> 389 and without tls
>                                             - i can't connect to ldap
> server
> under port 636
>
> if i use squirrelmail v1.5.1: - i can't connect to ldap server under port
> 389 only
>                                          - i can't connect to ldap server
> under port 389 with tls
>                                          - i can't connect to ldap server
> under port 636
>

By default LDAP clients verify name written in LDAP server certificate. They
refuse to connect, if name written on certificate does not match used
hostname. See TLS_REQCERT documentation in your ldap.conf manual or make
sure that certificate is valid.

--
Tomas
--
View this message in context: http://www.nabble.com/ERROR%3A-Unable-to-Bind-to-LDAP-Server-tf4680345.html#a13383334
Sent from the squirrelmail-users mailing list archive at Nabble.com.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--
squirrelmail-users mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users



--
Salu2 ;)
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--
squirrelmail-users mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux