G 'Day Help Support,
So I am trying to monitor a Domain Controller and can successfully Bind to port
389 with my credentials...
$ /usr/local/nagios/libexec/check_ldap -H nwh-dc-03.mydomain.org -b
"dc=mydomain,dc=org" -D svc_acct@nwh -P ******** -S -w 10 -c 20 -v
LDAP OK - 0.014 seconds response
time|time=0.014246s;10.000000;20.000000;0.000000
But when I attempt to connect using the same credentials but with the -ssl
option I am getting the following error.
$ /usr/local/nagios/libexec/check_ldap -H nwh-dc-03.mydomain.org -b
"dc=mydomain,dc=org" -D svc_acct@nwh -P ******** -S -w 10 -c 20 -v
ldap_bind: Can't contact LDAP server (-1)
additional info: error:14090086:SSL
routines:ssl3_get_server_certificate:certificate verify failed (unable to get
local issuer certificate)
Could not bind to the LDAP server
When I run a check_http to verify the certificate on port 636 I receive the
following response:
$ /usr/local/nagios/libexec/check_http -H nwh-dc-03.mydomain.org -C 30,1 -p 636
SSL OK - Certificate 'Unknown CN' will expire on 2021-07-07 10:49 -0700/PDT.
Can you help? Do I need to somehow get a copy of the certificate and add it to
my Linux server? As I don't see a switch to pass the certificate to the
plugin...
Thanks in advance,
Danny
Danny Gibson
Enterprise Monitoring
University of Washington Medicine
Mailbox # 359968
Seattle, WA 98104-2499
(206) 685-7783 Office
(360) 761-8274 Cell
[http://images.pmeimg7.com/public/user_assets/ed480482-0063-4d9a-990d-9321960c1ab8/fy21_awq1_hammerhead-da727629.png]
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed. If
you have received this email in error please notify the system manager. This
message contains confidential information and is intended only for the
individual named. If you are not the named addressee you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. If you are not the intended recipient you are
notified that disclosing, copying, distributing or taking any action in
reliance on the contents of this information is strictly prohibited.
