LDAP integration

[Abdusamad Nazarov]

Hello, 

I want to integreted LDAP integration in Wazuh  https://documentation.wazuh.com/current/user-manual/user-administration/ldap.html

The code doesn't work, I've been suffering for the second day!

echo -n | openssl s_client -connect XXX-XX-XX.xxxxxx.local:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapcacert.pem

Result Error:

Thank you

[Abdusamad Nazarov]

Windows Server 2016

Wazuh 4.12

вторник, 22 июля 2025 г. в 16:32:57 UTC+5, Abdusamad Nazarov:

[Fabian Ruiz]

Hi  Abdusamad,

Check this command to verify if the LDAPS connection is working properly: openssl s_client -connect XXX-XX-XX.xxxxxx.local:636. This should return the certificate chain from the LDAP server. If it fails with something like write:errno=104, it usually means the server is not accepting the SSL connection—possibly because LDAPS is not enabled or there's no certificate configured. Also, make sure the port is open and accessible.

You can test it with: nc -zv XXX-XX-XX.xxxxxx.local 63 If the port is closed, the issue is likely network-related (firewall, misconfiguration, or LDAPS not listening).

[Abdusamad Nazarov]

Hello, Fabian Ruiz

Thank you for your answer

I run this commands: result

Result command openssl s_client -connect XXX-XX-XX.xxxxxx.local:636

Thanks

среда, 23 июля 2025 г. в 05:38:56 UTC+5, Fabian Ruiz:

[Fabian Ruiz]

Hi Abdusamad,

This indicates that LDAPS is not properly configured on the LDAP server, Although port 636 is listening, the server does not have a valid SSL certificate assigned for LDAPS. As a result, when the client attempts to initiate the handshake, the server immediately closes the connection.  

[Abdusamad Nazarov]

Hello,

I have corrected what you said, now the error is as follows. Thank you in advance!

пятница, 25 июля 2025 г. в 05:52:15 UTC+5, Fabian Ruiz:

[Abdusamad Nazarov]

Please

вторник, 29 июля 2025 г. в 11:14:47 UTC+5, Abdusamad Nazarov:

[Abdusamad Nazarov]

There is an error in this area, where exactly I did not find everything according to the document

вторник, 29 июля 2025 г. в 11:14:47 UTC+5, Abdusamad Nazarov:

Hello,

[Fabian Ruiz]

Hi  Abdusamad,

It seems that your YAML format is not correct, which is why you are having problems with this. Organize your YAML format to verify that this is the problem.

[Abdusamad Nazarov]

Hello Fabian Ruiz,

I fixed it via the website https://www.yamllint.com/

Now another problem:  ERR: Unable to read type from file

Thank You!

четверг, 31 июля 2025 г. в 06:09:31 UTC+5, Fabian Ruiz:

[Abdusamad Nazarov]

Hello, Does anyone know what the problem is?

thanks

четверг, 31 июля 2025 г. в 11:03:03 UTC+5, Abdusamad Nazarov: