[Fedora-directory-users] mandating SSL-only connections

[Susan]

Hi, everybody.

I turned ssl on the server and it seemed to be working OK, I was getting replies with
ldapsearch -x -ZZ. (access log saying startTLS, aes256 SSL), tcpdump showing encrypted
traffic (on port 389 tho, not 636 but OK) 

However, ldapsearch -x was also working, transmitting in clear text (as seen on tcpdump).
 I went ahead and set the nsslapd-port to 0:

[05/Jan/2006:11:50:59 -0500] - Information: Non-Secure Port Disabled, server only
contactable via secure port
[05/Jan/2006:11:50:59 -0500] - Fedora-Directory/1.0.1 B2005.342.161 starting up
[05/Jan/2006:11:50:59 -0500] - Listening on All Interfaces port 636 for LDAPS requests

OK, good.  Now, however, ldapsearch -x -ZZ doesn't work anymore:

$>ldapsearch -x -ZZ
ldap_start_tls: Can't contact LDAP server (-1)

And ldapsearch -x -ZZ -p 636 -h cnyldap01 just hangs.. I get nothing back.

What am I doing wrong???


		
__________________________________________ 
Yahoo! DSL – Something to write home about. 
Just $16.99/mo. or less. 
dsl.yahoo.com