Hi,
  I am trying to get Apache 2.2.4(windows) to talk LDAP to my Netware 6.5sp6 
server.  I get the following error when trying to connect

[Tue Apr 17 22:47:50 2007] [warn] [client 10.1.1.1] [3372] auth_ldap 
authenticate: user tonyg authentication failed; URI / [LDAP: 
ldap_simple_bind_s() failed][Unavailable]

this is what dstrace shows on the server

New TLS connection 0xa1e68a80 from 172.30.0.20:3648, monitor = 0x1c4, index = 12
Monitor 0x1c4 initiating TLS handshake on connection 0xa1e68a80
DoTLSHandshake on connection 0xa1e68a80
TLS accept failure 5 on connection 0xa1e68a80, setting err = -5875. Error 
stack: TLS handshake failed on connection 0xa1e68a80, err = -5875
BIO ctrl called with unknown cmd 7
Server closing connection 0xa1e68a80, socket error = -5875
Connection 0xa1e68a80 closed

are these errors cert issues?

Here is my apache config

(Global Config)
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA.pem
LDAPTrustedGlobalCert CA_DER conf/FlightLineCA-SS.der
LDAPTrustedGlobalCert CA_BASE64 conf/FlightLineCA-SS.pem

(Directory Config)
<Directory "d:/websites/ldaptest">
AuthType basic
AuthBasicProvider ldap
AuthName "LdapTest"
AuthLDAPURL ldaps://fs0.ultra-fei.com:636/o=xyxx?cn?sub
AuthLDAPBindDN cn=admin,o=xyxx
AuthLDAPBindPassword xyxx
AllowOverride None
Order allow,deny
Allow from 172.30
Allow from 10.1
require valid-user
</Directory>

***********************************************
Tony Guadagno
Guadagno Consulting
[EMAIL PROTECTED] 
585.703.6700
***********************************************

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Tony Guadagno
EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED]
N:Guadagno;Tony
END:VCARD


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to