<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=Content-Type content="text/html; charset=us-ascii"> <META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD> <BODY> <DIV dir=ltr align=left>all set, not sure why, but changing line in /etc/openldap/ldap.conf to TLS_CACERT /etc/openldap/cacerts/cacert.pem took care of it; thanks again.</DIV> <DIV dir=ltr align=left> </DIV> <DIV dir=ltr align=left>Aaron</DIV> <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left> <HR tabIndex=-1> From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Bliss, Aaron Sent: Tuesday, January 17, 2006 7:47 PM To: fedora-directory-users@redhat.com Subject: [Fedora-directory-users] weird error when querying directory server </DIV> <DIV></DIV> <DIV>this works great from a redhat 4 box, however from my redhat 3 box I receive the following error:</DIV> <DIV>ldapsearch -x -ZZ '(uid =azb)' </DIV> <DIV>ldap_start_tls: Connect error additional info: Start TLS request accepted.Server willing to negotiate SSL. </DIV> <DIV> </DIV> <DIV>relevant entries of /etc/ldap.conf look like this:</DIV> <DIV>pam_password md5 ssl start_tls ssl on tls_cacertfile /etc/openldap/cacerts/cacert.pem tls_cacertdir /etc/openldap/cacerts/ </DIV> <DIV>client has read and execute to the ca certificate</DIV> <DIV> </DIV> <DIV>relavent entries of /etc/openldap/ldap.conf</DIV> <DIV>TLS_CACERTDIR /etc/openldap/cacerts TLS_REQCERT allow </DIV> <DIV>I'm just trying to verify that ssl logins are working from the redhat 3 box; secure logins from the redhat 4 box work fine. Thanks very much for your help.</DIV> <DIV> </DIV> <DIV>Aaron</DIV> <DIV> </DIV> <A href="http://www.preferredcare.org">www.preferredcare.org</A> "An Outstanding Member Experience," Preferred Care HMO Plans -- J. D. Power and Associates Confidentiality Notice: The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.</BODY></HTML>