Can't contact LDAP server

[sajuptpm]

Hi,

I am using centos 6, getting error SERVER_DOWN: {'info': 'TLS error
-5938:Encountered end of file', 'desc': "Can't contact LDAP server"}

while running ldapcon.search

I am using ldaps//

I already set, "LAPD_LDAPS=yes" in "#vim /etc/sysconfig/ldap"

[sajuptpm]

getting error while trying to run command: ldapsearch -d8 -x -H
ldaps://127.0.0.1 http://dpaste.com/686519


[saju@localhost ssl]$ ldapsearch -d8 -x -H ldaps://127.0.0.1
TLS: certificate
[E=ro...@localhost.localdomain,CN=localhost.localdomain,OU=SomeOrganizationalUnit,O=SomeOrganization,L=SomeCity,ST=SomeState,C=--]
is not valid - error -8172:Unknown code ___f 20.
TLS: error: connect - force handshake failure: errno 21 - moznss error
-8172
TLS: can't connect: TLS error -8172:Unknown code ___f 20.
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)



[saju@localhost ssl]$ ldapsearch -d8 -x -H ldaps://localhost.localdomain
TLS: certificate
[E=ro...@localhost.localdomain,CN=localhost.localdomain,OU=SomeOrganizationalUnit,O=SomeOrganization,L=SomeCity,ST=SomeState,C=--]
is not valid - error -8172:Unknown code ___f 20.
TLS: error: connect - force handshake failure: errno 21 - moznss error
-8172
TLS: can't connect: TLS error -8172:Unknown code ___f 20.
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

[Jeff Schroeder]

I think you typod the LDAP_LDAPS setting in your settings file. Run ps -efH and see if openldap is running with ldaps. My suspicion is that it is not

Sent from my iPhone

[sajuptpm]

[root@localhost openldap]# ps -efH | grep ldap
root 30457 17386 0 19:36 pts/1 00:00:00 grep ldap
ldap 30174 1 0 19:29 ? 00:00:00 /usr/sbin/slapd -h
ldap:/// ldaps:/// ldapi:/// -u ldap


http://monzell.com/post/12979782084/tls-problems-with-openldap-client
I created a new CA Certificate and tried, getting same arror

CA Issued Certificate
http://www.openldap.org/pub/ksoper/OpenLDAP_TLS.html#5.0

[sajuptpm]

[root@localhost openldap-data]# openssl verify cacert.pem
cacert.pem: C = IN, ST = Bangalore, O = Fluent, OU = Software, CN =
Manager, emailAddress = s...@sa.com
error 18 at 0 depth lookup:self signed certificate
OK

[Di majo]

MT103/202 DIRECT WIRE TRANSFER
PAYPAL TRANSFER
CASHAPP TRANSFER
ZELLE TRANSFER
LOAN DEAL
TRANSFER WISE
WESTERN UNION TRANSFER
BITCOIN FLASHING
BANK ACCOUNT LOADING/FLASHING
IBAN TO IBAN TRANSFER
MONEYGRAM TRANSFER
IPIP/DTC
SLBC PROVIDER
CREDIT CARD TOP UP
DUMPS/ PINS
SEPA TRANSFER
WIRE TRANSFER
BITCOIN TOP UP
GLOBALPAY INC US
SKRILL USA
UNIONPAY RECEIVER

Thanks.


NOTE; ONLY SERIOUS / RELIABLE RECEIVERS CAN CONTACT.

DM ME ON WHATSAPP
+44 7529 555638