> -----Message d'origine----- > De : ldescotte....@orange-ftgroup.com [mailto:ldescotte....@orange- > ftgroup.com] > Envoyé : mercredi 2 juin 2010 12:15 > À : users@httpd.apache.org > Objet : RE: [us...@httpd] LDAP authnz with SSL > > I didn't need to set any certificate file on JXPlorer but I can connect to > LDAP in https with the client, so I don't think it is needed > > -----Original Message----- > From: Eric Covener [mailto:cove...@gmail.com] > Sent: mercredi 2 juin 2010 12:11 > To: users@httpd.apache.org > Subject: Re: [us...@httpd] LDAP authnz with SSL > > On Wed, Jun 2, 2010 at 5:06 AM, <ldescotte....@orange-ftgroup.com> wrote: > > Here is the error i'm getting when i try to contact LDAP server with SSL > : > > > > [warn] [client ****] [12740] auth_ldap authenticate: user *** > > authentication failed; URI server2 [LDAP: ldap_simple_bind_s() > > failed][Can't contact LDAP server] > > > > Wouldn't you need to teach it about a trusted CA for the LDAP server > (LDAPTrustedGLobalCert)? > > -- > Eric Covener > cove...@gmail.com >
Hi, Rather than using JXPlorer, you may at least try with ldapsearch on the same box. Btw, have you configured your ldap.conf file for "TLS support" (the minimum being the "TLS_REQCERT" parameter) ? A quick google search gives for example (in French, but that may be of interest to you ...) : http://arnofear.free.fr/linux/template.php?tuto=2&page=5 Regards Emmanuel --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
