From: Seann (nombranduetsukinokage.net)
Date: Fri Sep 03 2010 - 16:07:13 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

  On 9/3/2010 3:51 PM, Victor Duchovni wrote:
> On Fri, Sep 03, 2010 at 03:23:28PM -0500, Seann wrote:
>
>> When start_tls = yes, my error is:
>> Sep 2 09:46:03 server postfix/postmap[4650]: error: dict_ldap_connect:
>> Unable to set STARTTLS: -11: Connect error
> Enable LDAP debugging to see more logging. The OpenLDAP library will
> return this error when the peer certificate CommonName does not match
> the hostname you specify, but there could be other errors.
>
>> When I use the LDAPS URI, I get this:
>>
>> Sep 2 09:46:55 server postfix/postmap[4659]: warning: dict_ldap_connect:
>> Unable to bind to server ldaps://AD.domain.net:636 as CN=admin,CN=Users,
>> DC=domain,DC=net: -1 (Can't contact LDAP server)
> Is anyone home on port 636? Does "openssl s_client" work?
>
Yes, there is a listener on 636, as I use it for other LDAPS queries. I
haven't a clue how to turn on debuging for LDAP, is it the same flags as
the main postfix system debugging?

~Seann

• application/pkcs7-signature attachment: S/MIME Cryptographic Signature

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]