Galera 4 MySQL 8 LDAP Authentication fails - TLS problem?

[Daniel Corrigan]

All, 

I've been troubleshooting LDAP authentication on Galera 4 MySQL 8 running on Ubuntu 22.04.

Any connection results in:

[ERROR] [MY-000000] [Server] Plugin authentication_ldap_simple reported: ': ldap_set_option(LDAP_OPT_X_TLS_NEWCTX) Can't contact LDAP server'

I've tried setting authentication_ldap_simple_tls ON and OFF and both produce the same error. 

I can ldapsearch from the machine with the same credentials and it connects fine.

Here is the rest of my applicable configuration.

authentication_ldap_simple_ca_path=/etc/ssl/certs/ebsi.df.crt
authentication_ldap_simple_server_host=ebsi.df
authentication_ldap_simple_server_port=389
authentication_ldap_simple_bind_base_dn="dc=ebsi,dc=df"
authentication_ldap_simple_bind_root_dn="cn=binduser,cn=Users,dc=ebsi,dc=df"
authentication_ldap_simple_bind_root_pwd="bindpass"
authentication_ldap_simple_group_search_attr="cn"
authentication_ldap_simple_user_search_attr="samaccountname"
authentication_ldap_simple_tls="off"

Any help?

Thanks,
Dan