Mailinglist Archive: opensuse (4208 mails)
| < Previous | Next > |
LDAP SSL TLS Connection (SuSE 9.1)
- From: Ann Hopkins <seashell@xxxxxxxxxxxxx>
- Date: Wed, 14 Jul 2004 17:03:04 -0700
- Message-id: <40F5C9B8.5050602@xxxxxxxxxxxxx>
I am trying to get TLS to work but I keep getting the following message.
Jul 14 16:48:53 xxxxxx slapd[4331]: @(#) $OpenLDAP: slapd 2.2.6 (Apr 6 2004 02:01:25) $ abuild@lifschitz:/usr/src/packages/BUILD/openldap-2.2.6/servers/slapd
Jul 14 16:48:53 xxxxxx slapd[4331]: bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (April 5, 2004)
Jul 14 16:48:53 xxxxxx slapd[4331]: bdb_db_init: Initializing BDB database
Jul 14 16:48:53 xxxxxx slapd[4331]: main: TLS init def ctx failed: -1
Jul 14 16:48:53 xxxxxx slapd[4331]: slapd stopped.
Jul 14 16:48:53 xxxxxx slapd[4331]: connections_destroy: nothing to destroy.
I have created SSL keys for the server and placed the following into the two config files.
/etc/openldap/slapd.conf
TLSCACertificateFile /etc/ssl/cacert.pem
TLSCertificateFile /etc/openldap/servercrt.pem
TLSCertificateKeyFile /etc/openldap/serverkey.pem
/etc/openldap/lapd.conf
TLS_REQCERT allow
TLS_CACERT /etc/ssl/cacert.pem
Does anyone know exactly what the error means.
Thanks
Jul 14 16:48:53 xxxxxx slapd[4331]: @(#) $OpenLDAP: slapd 2.2.6 (Apr 6 2004 02:01:25) $ abuild@lifschitz:/usr/src/packages/BUILD/openldap-2.2.6/servers/slapd
Jul 14 16:48:53 xxxxxx slapd[4331]: bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (April 5, 2004)
Jul 14 16:48:53 xxxxxx slapd[4331]: bdb_db_init: Initializing BDB database
Jul 14 16:48:53 xxxxxx slapd[4331]: main: TLS init def ctx failed: -1
Jul 14 16:48:53 xxxxxx slapd[4331]: slapd stopped.
Jul 14 16:48:53 xxxxxx slapd[4331]: connections_destroy: nothing to destroy.
I have created SSL keys for the server and placed the following into the two config files.
/etc/openldap/slapd.conf
TLSCACertificateFile /etc/ssl/cacert.pem
TLSCertificateFile /etc/openldap/servercrt.pem
TLSCertificateKeyFile /etc/openldap/serverkey.pem
/etc/openldap/lapd.conf
TLS_REQCERT allow
TLS_CACERT /etc/ssl/cacert.pem
Does anyone know exactly what the error means.
Thanks
| < Previous | Next > |