[Fedora-directory-users] problem with SSL and load balance

[Victor Hugo dos Santos]

Hello List,

I have the same problem that Alex Aka in Apr 2006
http://www.redhat.com/archives/fedora-directory-users/2006-April/msg00022.html

I have two FDS (fds1 and fds2) in MMR

in the DNS I create this machines

fds1     IN     A     10.0.0.11
fds2     IN     A     10.0.0.12
fds      IN     A     10.0.0.11
fds      IN     A     10.0.0.12

in the clients, I configure the ldap.conf with this parameters:

BASE            dc=mydomain,dc=com
URI             ldap://fds.mydomain.com

this configuration work very,very fine !!!! exist replication between
servers and fault tolerance in the clients.. but i enable SSL in
server and in the clients (ldap.conf)


BASE            dc=mydomain,dc=com
URI             ldaps://fds.mydomain.com
TLS_CACERT      /etc/ssl/certs/cacert.org.pem
TLS_REQCERT     allow

and "no" work !!! :-( i receive this error:

ldap_bind: Can't contact LDAP server (-1)

additional info: TLS: hostname does not match CN in peer certificate

this problem, is derivate that i configured the servers with one
certificate and distinct CN for independent serves (fds1 and fds2)...

if I config one same certificate with same CN (fds) for both nodes
(fds1 and fds2).. work fine in the clients, but the replication dont
work !!! :-(

obs.: my certificates is sign in http://cacert.org

any idea or suggestion ???

thanks


-- 
-- 
Victor Hugo dos Santos
Linux Counter #224399