Charles Lacroix wrote:
Haha , i should have taken a bet before i tested this out :)

It didn't workout but while i tcpdumped i saw a url fly by pointing to some page on novell's website.

http://developer.novell.com/repository/attributes/certattrs_v10.htm
with a broken link to a pdf file which i cannot find.
I found another document that i believe it would be 49% similar / reverent according to search results on novell's website.

http://search.novell.com/qfsearch/SearchServlet?bbshow=true&bbindex=NDKBestBets&theme=&encoding=ISO-8859-1&retencoding=ISO-8859-1&lang=en&country=us&noredirect=&collection=developer%3Bdev_ndk&query=pkisv10.pdf&hdrsrchsubmit=Search

I hope the problem is out of my backyard :)
Yeah, I bet your openldap is trying to verify the certificate that the LDAPS server is sending and doesn't like it (since it's most likely self signed). Edit your /etc/ldap.conf or /etc/openldap/ldap.conf file and add a line like:

TLS_REQCERT never

this will tell the openldap client (which is what courier is actually using to talk LDAP) that it doesn't need to trust certificates in order to allow the connection. Restart courier-authlib (/etc/init.d/courier-authlib restart or equiv) and that *should* do it :-)

Jay

begin:vcard
fn:Jay Lee
n:Lee;Jay
org:Philadelphia Biblical University;Information Technology Dept.
email;internet:[EMAIL PROTECTED]
title:Network / Systems Administrator
x-mozilla-html:TRUE
version:2.1
end:vcard

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to