Hi,

I am using centos 6,  getting error SERVER_DOWN: {'info': 'TLS error
-5938:Encountered end of file', 'desc': "Can't contact LDAP server"}

while running ldapcon.search

I  am using ldaps//

I already set, "LAPD_LDAPS=yes" in "#vim /etc/sysconfig/ldap"

getting error while trying to run command: ldapsearch -d8 -x -H
ldaps://127.0.0.1  http://dpaste.com/686519

[saju@localhost ssl]$ ldapsearch -d8 -x -H ldaps://127.0.0.1
TLS: certificate
[E=r...@localhost.localdomain,CN=localhost.localdomain,OU=SomeOrganizationalUnit,O =SomeOrganization,L=SomeCity,ST=SomeState,C=--]
is not valid - error -8172:Unknown code ___f 20.
TLS: error: connect - force handshake failure: errno 21 - moznss error
-8172
TLS: can't connect: TLS error -8172:Unknown code ___f 20.
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

[saju@localhost ssl]$ ldapsearch -d8 -x -H ldaps://localhost.localdomain
TLS: certificate
[E=r...@localhost.localdomain,CN=localhost.localdomain,OU=SomeOrganizationalUnit,O =SomeOrganization,L=SomeCity,ST=SomeState,C=--]
is not valid - error -8172:Unknown code ___f 20.
TLS: error: connect - force handshake failure: errno 21 - moznss error
-8172
TLS: can't connect: TLS error -8172:Unknown code ___f 20.
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

I think you typod the LDAP_LDAPS setting in your settings file. Run ps -efH and see if openldap is running with ldaps. My suspicion is that it is not

Sent from my iPhone

On Jan 12, 2012, at 5:33, sajuptpm <sajup...@gmail.com> wrote:

[root@localhost openldap]# ps -efH | grep ldap
root     30457 17386  0 19:36 pts/1    00:00:00           grep ldap
ldap     30174     1  0 19:29 ?        00:00:00   /usr/sbin/slapd -h
ldap:/// ldaps:/// ldapi:/// -u ldap

http://monzell.com/post/12979782084/tls-problems-with-openldap-client
I created a new CA Certificate and tried, getting same arror

CA Issued Certificate
http://www.openldap.org/pub/ksoper/OpenLDAP_TLS.html#5.0

[root@localhost openldap-data]# openssl verify cacert.pem
cacert.pem: C = IN, ST = Bangalore, O = Fluent, OU = Software, CN =
Manager, emailAddress = s...@sa.com
error 18 at 0 depth lookup:self signed certificate
OK