I'm suddenly stumped by self-signed certs.
I used the setupssl2.sh script to generate my certs and install them into
my ldap. I end up with this --
# certutil -L -d .
Certificate Nickname Trust Attributes
CA certificate CTu,u,u
getent is able to see my ldap accounts and ldapsearch -ZZ returns
successfully. But I can't authenticate successfully unless I add
TLS_ReqCert allow to my ldap configs on my client. But what is weird is I
*know* that this has worked in the past.
OS 2.6.39-300.26.1.el6uek.x86_64 6.5 (Santiago)
When I try to authenticate I get this error message:
Jul 3 13:03:03 myserver nslcd: [495cff] ldap_result() failed:
Can't contact LDAP server
Googling this it looks like it doesn't trust my CA. But I *KNOW* that
this has worked in the past. But we have patched our clients recently and
have newer release of openssl. Does anyone have any idea of how I can get
I've downloaded the 389 DS source "Release 184.108.40.206" from http://port389.org/sources/389-ds-base-220.127.116.11.tar.bz2.
When trying to compile with configure and make options [trying to compile the code in CentOS6.5 final, I've a custom script to build the source], I could see the make fails with missing dependencies. I've checked the previous version of source download [18.104.22.168] which I downloaded much earlier and could see "build.test" directory which has "Makefile"
With the present build "22.214.171.124" I'm missing the entire "build.test" directory. I've verified downloading the previous versions and could see the same folder getting missed.
Am I missing something?
389 DS missing necessary build dependencies. Could someone advice on this?