RHEL4, LDAP, TLS

[Ryan Golhar]

No, I don't.  I don't have this on the RHEL3 machines either.  Here is
what my ldap.conf looks like for the machines that work:

host myldapserver.umdnj.edu
base o=something,o=UMDNJ,c=US
ssl start_tls
pam_password md5


When I use the same thing on EL 4, it doesn't work.  I have to disable
ssl start_tls...

Ryan

-----Original Message-----
From: James Cooley [mailto:jcooley at fit.edu] 
Sent: Wednesday, May 11, 2005 5:02 PM
To: golharam at umdnj.edu; General Red Hat Linux discussion list
Subject: Re: RHEL4, LDAP, TLS


Ryan,

Do you have your Certificate Authority Certificate defined in
/etc/ldap.conf?

The line looks similar to the following:

tls_cacertfile /etc/certs/myCACert.cer

And is the CACertificate file readable by everyone?

Check those two items first, and if they don't solve your issues, I'll
think of other problem areas.

--James Cooley



Ryan Golhar wrote:

>Hi all,
>
>I'm running into a problem and not sure what to do....hoping for some 
>guidance...
>
>I have an LDAP server (running RHEL3 AS) using OpenLDAP setup to use 
>ssl and tls.
>
>I have about 20 machines (RHEL3 WS) authenticating users via LDAP using

>TLS
>
>I just installed RHEL4 WS on one machine and can't get it to 
>autheticate users via LDAP.  I discovered that if I turn off "Use TLS" 
>using authconfig, I can then log in.
>
>I'm concerned that 1)  the 20 machines running EL3 WS are 
>authenticating using TLS and the EL 4 WS isn't, or 2) TLS isn't 
>configured correctly and the EL3 WS are running without TLS.
>
>Is there a way I can check to make sure I have things set up correctly 
>to use TLS?
>
>Ryan
>
>  
>