8><-----

 

This is the real problem I think - looks like you've told the

console/admin server to use SSL to connect to the directory server, but

you haven't specified to use port 636

 

8><-----

Im not aware I did....

8><-----

 

http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information

 

see also the configuration directory ldap url - ldapurl in

/etc/dirsrv/admin-serv/adm.conf

 

8><-----

 

Ok, I fixed the latter by editing the adm.conf to point at 636....however I now have a SSL error...

 

============

[root@vuwunicooimm001 admin-serv]# ldapsearch -x -D "cn=ldapadmin" -w XXXXXXX -b o=netscaperoot "(&(nsServerID=slapd-vuwunicooimm001))"

ldap_bind: Can't contact LDAP server (-1)

        additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

============

 

Ive tried using this syntax but with no joy...

 

ldapmodify -x -D "cn=directory manager" -w password

dn: dn of your server instance entry

changetype: modify

replace: nsServerSecurity

nsServerSecurity: on

 

so my command is,

 

ldapmodify -x -D "cn=lpdapadmin" -w password XXXXXXX dn:vuwunicooimm001.vuw.ac.nz changetype: modify replace: nsServerSecurity nsServerSecurity on

 

which fails......

 

Doing a,

 

[root@vuwunicooimm001 admin-serv]# certutil -d . -L

 

===============

Certificate Nickname                                         Trust Attributes

                                                             SSL,S/MIME,JAR/XPI

 

VUW CA cert                                                  CT,,

==============

 

So I dont know if cutting and pasting the errors work, anyway, attempting to restart the console I get,

 

 

So I put in the details,

 

 

Which fails,

 

 

error log for adminserv....

 

 

==========================

[Fri Jun 25 09:19:22 2010] [notice] [client 127.0.0.1] admserv_host_ip_check: ap_get_remote_host could not resolve 127.0.0.1

[Fri Jun 25 09:19:22 2010] [notice] [client 127.0.0.1] admserv_host_ip_check: host [localhost.localdomain] did not match pattern [*.vuw.ac.nz] -will scan aliases

[Fri Jun 25 09:19:22 2010] [notice] [client 127.0.0.1] admserv_host_ip_check: host alias [localhost] did not match pattern [*.vuw.ac.nz]

[Fri Jun 25 09:19:22 2010] [debug] mod_admserv/mod_admserv.c(2762): admserv_check_user_id

[Fri Jun 25 09:19:22 2010] [debug] mod_admserv/mod_admserv.c(1910): [25584] cache entry not found for user [ldapadmin]

[Fri Jun 25 09:19:22 2010] [debug] mod_admserv/mod_admserv.c(1918): [25584] user [ldapadmin] not cached - reason user not in cache

[Fri Jun 25 09:19:22 2010] [crit] buildUGInfo(): unable to initialize TLS connection to LDAP host vuwunicooimm001.vuw.ac.nz port 636: 4

[Fri Jun 25 09:19:22 2010] [notice] [client 127.0.0.1] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler

[Fri Jun 25 09:19:22 2010] [crit] buildUGInfo(): unable to initialize TLS connection to LDAP host vuwunicooimm001.vuw.ac.nz port 636: 4

[Fri Jun 25 09:19:22 2010] [debug] mod_admserv/mod_admserv.c(2609): userauth, bind (null)

=========================

 

 

regards