• [^] # Re: cn=chezmoicamarche,dc=org

    Posté par . En réponse au message ldap + tls. Évalué à 1.

    ldapsearch -v -x -H ldap://srvtest3.test.org -ZZ '*'
    ldap_initialize( ldap://srvtest3.test.org )
    ldap_start_tls: Connect error (-11)
    additional info: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

    mon /etc/openldap/ldap.conf

    #host 127.0.0.1
    base dc=mh,dc=org
    uri ldap//srvtest3.test.org/
    ldap_version 3
    TLS_REQCERT allow

    #TLS_CACERT /etc/openldap/cacerts/ldap.crt
    #TLS_CERT /etc/openldap/cacerts/ldap.crt
    #TLS_KEY /etc/openldap/cacerts/ldap.key